45ab48caf6ebc4d1ba1e533d916705b5e9cf30381a0430be9c7e9ec5b36c60b3 | Triage

Sharing

General

Target

369f86bbd4ebec99e57fb0bb8089bae9_JaffaCakes118
Size

15KB
Sample

240710-1776pavhqa
MD5

369f86bbd4ebec99e57fb0bb8089bae9
SHA1

971ea812c8a6b91bdc5d62fef641a034e715d5b7
SHA256

45ab48caf6ebc4d1ba1e533d916705b5e9cf30381a0430be9c7e9ec5b36c60b3
SHA512

d743b16924c21e5857e2fb789f90509210b49feb207769b5170295fe7defd2e5838c45c44da764e54d7dcaf9f751d6910dbe03fb6f2ef250676d31512c9c9ee4
SSDEEP

384:2LdWiXV4yRux2rL6hA2hpatzvIe3DvQse9KOfEVQO1LTDSCMm2OTnJCT:wlpQxC/zTnJCT

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  369f86bbd4ebec99e57fb0bb8089bae9_JaffaCakes118
- Size
  
  15KB
- MD5
  
  369f86bbd4ebec99e57fb0bb8089bae9
- SHA1
  
  971ea812c8a6b91bdc5d62fef641a034e715d5b7
- SHA256
  
  45ab48caf6ebc4d1ba1e533d916705b5e9cf30381a0430be9c7e9ec5b36c60b3
- SHA512
  
  d743b16924c21e5857e2fb789f90509210b49feb207769b5170295fe7defd2e5838c45c44da764e54d7dcaf9f751d6910dbe03fb6f2ef250676d31512c9c9ee4
- SSDEEP
  
  384:2LdWiXV4yRux2rL6hA2hpatzvIe3DvQse9KOfEVQO1LTDSCMm2OTnJCT:wlpQxC/zTnJCT
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2