1c9fccf7955654c4f890ce64b33833d22258035f82131e26dc6fd3f4c7ef9df9 | Triage

Sharing

General

Target

3aec816eed6ce0553e21084d0f5d216a_JaffaCakes118
Size

392KB
Sample

240711-16v5qsyfke
MD5

3aec816eed6ce0553e21084d0f5d216a
SHA1

bd607d0b4a0b9ffd263aafb49cf41b689da9fa05
SHA256

1c9fccf7955654c4f890ce64b33833d22258035f82131e26dc6fd3f4c7ef9df9
SHA512

a463f24c7ed48371953eb9b0b66d438ccf237716197e7f4b5ce4865d2f5371ccfced359a6eda2217a689c7c977d4b744c978fc2e9d5c882befa3f58760d5baf3
SSDEEP

12288:mVJ7URfw9/JYhA8MveSqkyqx61/OQvQ9fog0ghc1:mVJ7URfw9/J7yqx6FOQxkc1

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  3aec816eed6ce0553e21084d0f5d216a_JaffaCakes118
- Size
  
  392KB
- MD5
  
  3aec816eed6ce0553e21084d0f5d216a
- SHA1
  
  bd607d0b4a0b9ffd263aafb49cf41b689da9fa05
- SHA256
  
  1c9fccf7955654c4f890ce64b33833d22258035f82131e26dc6fd3f4c7ef9df9
- SHA512
  
  a463f24c7ed48371953eb9b0b66d438ccf237716197e7f4b5ce4865d2f5371ccfced359a6eda2217a689c7c977d4b744c978fc2e9d5c882befa3f58760d5baf3
- SSDEEP
  
  12288:mVJ7URfw9/JYhA8MveSqkyqx61/OQvQ9fog0ghc1:mVJ7URfw9/J7yqx6FOQxkc1
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Scheduled Task/Job

Scheduled Task

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2