68122ebb39c0fb29e66fe137d0f551c4691e3f541989853ea96f827f6a142cdf | Triage

Sharing

General

Target

3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118
Size

352KB
Sample

240713-b7ndvazgqm
MD5

3fb67f9b4129841ee9c935f5038e9dd1
SHA1

3b855326689f6fda41600276a76d66ed38ad983e
SHA256

68122ebb39c0fb29e66fe137d0f551c4691e3f541989853ea96f827f6a142cdf
SHA512

0710d64b4c7003945212b450bc430ee73bb3fceabf89ea9129e8d80ad884856725fa605c51d71f2283c661d4359874a7b0a3b75973e7b5c0ea2d4f2344160120
SSDEEP

6144:dma0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3n92aMK:d/08N5qAWgko8wR54aN7mwsSkal

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  3fb67f9b4129841ee9c935f5038e9dd1_JaffaCakes118
- Size
  
  352KB
- MD5
  
  3fb67f9b4129841ee9c935f5038e9dd1
- SHA1
  
  3b855326689f6fda41600276a76d66ed38ad983e
- SHA256
  
  68122ebb39c0fb29e66fe137d0f551c4691e3f541989853ea96f827f6a142cdf
- SHA512
  
  0710d64b4c7003945212b450bc430ee73bb3fceabf89ea9129e8d80ad884856725fa605c51d71f2283c661d4359874a7b0a3b75973e7b5c0ea2d4f2344160120
- SSDEEP
  
  6144:dma0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3n92aMK:d/08N5qAWgko8wR54aN7mwsSkal
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2