410b9beb6c0e352c5b0d0952140e472695aaf75bb8fb5aa01b2db72a31f476b9 | Triage

Sharing

General

Target

2e722f287319a2b902e73cc06a7b729f_JaffaCakes118
Size

186KB
Sample

240709-a988naxfrl
MD5

2e722f287319a2b902e73cc06a7b729f
SHA1

3e05640d362c26b08f95632f60c1ca5f2ffd8168
SHA256

410b9beb6c0e352c5b0d0952140e472695aaf75bb8fb5aa01b2db72a31f476b9
SHA512

f692240fff3d0fa9a10fb20856eecadbdbce62d4357b71240db753e9917c4686b79ee4ddb59c922205c8890705dd47824f9ce350e05bc2540080ba020ed0bab4
SSDEEP

3072:GFP5rJMFiaNNDo/MdTgefofr2Qp7SibRGsVJqBNFPcIRI/sGh4pXkEF3xv6+QTe4:GFP59MFxKkqfSCSibBsBCs04pVr6Eewm

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  2e722f287319a2b902e73cc06a7b729f_JaffaCakes118
- Size
  
  186KB
- MD5
  
  2e722f287319a2b902e73cc06a7b729f
- SHA1
  
  3e05640d362c26b08f95632f60c1ca5f2ffd8168
- SHA256
  
  410b9beb6c0e352c5b0d0952140e472695aaf75bb8fb5aa01b2db72a31f476b9
- SHA512
  
  f692240fff3d0fa9a10fb20856eecadbdbce62d4357b71240db753e9917c4686b79ee4ddb59c922205c8890705dd47824f9ce350e05bc2540080ba020ed0bab4
- SSDEEP
  
  3072:GFP5rJMFiaNNDo/MdTgefofr2Qp7SibRGsVJqBNFPcIRI/sGh4pXkEF3xv6+QTe4:GFP59MFxKkqfSCSibBsBCs04pVr6Eewm
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2