a13776d9d8202205ba8b9dc3aa84ceda87dd7e4d1a583d5c5dce90bbdb19299c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d36d015c602b22249cdb9487b753b2e_JaffaCakes118
Size

352KB
Sample

240716-hjdytssdkg
MD5

4d36d015c602b22249cdb9487b753b2e
SHA1

c7ca3f1519671eaa6e0c2bb991cfc43b000718ea
SHA256

a13776d9d8202205ba8b9dc3aa84ceda87dd7e4d1a583d5c5dce90bbdb19299c
SHA512

8f337633de3080ac39c384636d8aeefd48cb1445adc4ab81d2919384be5feb3e7637c552db9f15592fe8509dc91a59bfc3ad576ad2bf27c1821b5a771ca46fc7
SSDEEP

6144:mmM0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nPU7Fp:mJ08N5qAWgko8wR54aN7mwsSfUf

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  4d36d015c602b22249cdb9487b753b2e_JaffaCakes118
- Size
  
  352KB
- MD5
  
  4d36d015c602b22249cdb9487b753b2e
- SHA1
  
  c7ca3f1519671eaa6e0c2bb991cfc43b000718ea
- SHA256
  
  a13776d9d8202205ba8b9dc3aa84ceda87dd7e4d1a583d5c5dce90bbdb19299c
- SHA512
  
  8f337633de3080ac39c384636d8aeefd48cb1445adc4ab81d2919384be5feb3e7637c552db9f15592fe8509dc91a59bfc3ad576ad2bf27c1821b5a771ca46fc7
- SSDEEP
  
  6144:mmM0zANEa8Li1bWlWjkoCtfwR+RwBT4M9NdX753uSUQ1sab3nPU7Fp:mJ08N5qAWgko8wR54aN7mwsSfUf
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2