40dce9ca641144297bfe32cca4c147be4c725a55c3f7c2458ee5cc91bab15b70 | Triage

Sharing

General

Target

4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118
Size

352KB
Sample

240715-epp2haxcnp
MD5

4826e3d9a775d82209a1d3db23ae6b44
SHA1

7bcc1c46b20690b1f316ee64882340992efd80fb
SHA256

40dce9ca641144297bfe32cca4c147be4c725a55c3f7c2458ee5cc91bab15b70
SHA512

ad10fcd1611be1492abd39c2f731c1c48c27634e39941230a2f288cc0eaab570052eaa9da9a7e8239e4d7728c89a965d07aa6decad57ea0122ccfda822d50eee
SSDEEP

6144:JjttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:JWWDQcShyGloFjbTA1KmNo/VFC6l

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  4826e3d9a775d82209a1d3db23ae6b44_JaffaCakes118
- Size
  
  352KB
- MD5
  
  4826e3d9a775d82209a1d3db23ae6b44
- SHA1
  
  7bcc1c46b20690b1f316ee64882340992efd80fb
- SHA256
  
  40dce9ca641144297bfe32cca4c147be4c725a55c3f7c2458ee5cc91bab15b70
- SHA512
  
  ad10fcd1611be1492abd39c2f731c1c48c27634e39941230a2f288cc0eaab570052eaa9da9a7e8239e4d7728c89a965d07aa6decad57ea0122ccfda822d50eee
- SSDEEP
  
  6144:JjttqWASxQ0rShyGlReFjbjfhyqQMRYNYoDvohAi3lFeB6M2Xf3:JWWDQcShyGloFjbTA1KmNo/VFC6l
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2