3ce6fc6dd4998308a1c705df2b66a3f77fd2002ab556a466c4eda9a40bba1b8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37da9aa37bb10ccbef64ea4bac50eed8_JaffaCakes118
Size

448KB
Sample

240711-f3az6s1dkk
MD5

37da9aa37bb10ccbef64ea4bac50eed8
SHA1

319129991ede24d4cd210f4120ad5338dc0e5b5b
SHA256

3ce6fc6dd4998308a1c705df2b66a3f77fd2002ab556a466c4eda9a40bba1b8b
SHA512

b2da949467d584446600bae15ab4dd669c48e3370186be39067e5b512c54a25ed25de81433a3a9e1574f2a09393e4fa6d2ecef199b83fbc1cf4d4c06bd23e7a0
SSDEEP

12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vm/:5GpblAB8RLBU+nT74cDzDqc5y

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  37da9aa37bb10ccbef64ea4bac50eed8_JaffaCakes118
- Size
  
  448KB
- MD5
  
  37da9aa37bb10ccbef64ea4bac50eed8
- SHA1
  
  319129991ede24d4cd210f4120ad5338dc0e5b5b
- SHA256
  
  3ce6fc6dd4998308a1c705df2b66a3f77fd2002ab556a466c4eda9a40bba1b8b
- SHA512
  
  b2da949467d584446600bae15ab4dd669c48e3370186be39067e5b512c54a25ed25de81433a3a9e1574f2a09393e4fa6d2ecef199b83fbc1cf4d4c06bd23e7a0
- SSDEEP
  
  12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vm/:5GpblAB8RLBU+nT74cDzDqc5y
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2