6b0cfb6d909c6f2904ac6b18deea973606e640f7d14833f56763778dca1b5d7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fa2a1b258f0fd7c425ae8e144c9606_JaffaCakes118
Size

87KB
Sample

240709-s6k1rssfjb
MD5

30fa2a1b258f0fd7c425ae8e144c9606
SHA1

5a919cba46ccea2747c0ab211ba50b9018677697
SHA256

6b0cfb6d909c6f2904ac6b18deea973606e640f7d14833f56763778dca1b5d7b
SHA512

9f6bdc683b653896dc4990f3aa421a19b3d24732810345adb9680e143096be394c961d5cb8401fcd5499546f9a8b678cb10a14cb149394fee73d5a22f9edae01
SSDEEP

1536:3wNLv5ekzfbnaN3oGivdY891Cgp2U1e58CztOAgi2GJqN7G8FLuFp:3wNLxbeN3oGav+Ahe58Czw3GJqM8FLc

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  30fa2a1b258f0fd7c425ae8e144c9606_JaffaCakes118
- Size
  
  87KB
- MD5
  
  30fa2a1b258f0fd7c425ae8e144c9606
- SHA1
  
  5a919cba46ccea2747c0ab211ba50b9018677697
- SHA256
  
  6b0cfb6d909c6f2904ac6b18deea973606e640f7d14833f56763778dca1b5d7b
- SHA512
  
  9f6bdc683b653896dc4990f3aa421a19b3d24732810345adb9680e143096be394c961d5cb8401fcd5499546f9a8b678cb10a14cb149394fee73d5a22f9edae01
- SSDEEP
  
  1536:3wNLv5ekzfbnaN3oGivdY891Cgp2U1e58CztOAgi2GJqN7G8FLuFp:3wNLxbeN3oGav+Ahe58Czw3GJqM8FLc
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds policy Run key to start application
  persistence
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan