6c0d0e5390b99dc1093f263f7fbf0f4eb394bc3e4eb5c832ed32cdc61f1d1f0c | Triage

Sharing

General

Target

454d9decd6a020eeb453c6e37cdf11db_JaffaCakes118
Size

372KB
Sample

240714-ltp1mavhnp
MD5

454d9decd6a020eeb453c6e37cdf11db
SHA1

e6fa5779ffde5c181c0bbc753d0662d09f535cda
SHA256

6c0d0e5390b99dc1093f263f7fbf0f4eb394bc3e4eb5c832ed32cdc61f1d1f0c
SHA512

e31a4ed9b3efc5a088e5b715b275ac9724595ec8a4a4a3737f8a0ad5941f37f3f2e933b6d22b50d7d26f26aebaf4197ec51fee47a559caf8d54b31f0450bbfca
SSDEEP

6144:Ks9jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:KsNvjVkCrSvoZNyl5fwD

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  454d9decd6a020eeb453c6e37cdf11db_JaffaCakes118
- Size
  
  372KB
- MD5
  
  454d9decd6a020eeb453c6e37cdf11db
- SHA1
  
  e6fa5779ffde5c181c0bbc753d0662d09f535cda
- SHA256
  
  6c0d0e5390b99dc1093f263f7fbf0f4eb394bc3e4eb5c832ed32cdc61f1d1f0c
- SHA512
  
  e31a4ed9b3efc5a088e5b715b275ac9724595ec8a4a4a3737f8a0ad5941f37f3f2e933b6d22b50d7d26f26aebaf4197ec51fee47a559caf8d54b31f0450bbfca
- SSDEEP
  
  6144:Ks9jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:KsNvjVkCrSvoZNyl5fwD
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2