92425b864adb5bb77dce2d026237ab79d5924bd8b348b0a02548a97f69f57a73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5de8de3a6f666fed24a4705d15c78a8c_JaffaCakes118
Size

381KB
Sample

240719-18r6vswfqe
MD5

5de8de3a6f666fed24a4705d15c78a8c
SHA1

cf7bac544862e577f2ed45964c7cdc3b43bcda84
SHA256

92425b864adb5bb77dce2d026237ab79d5924bd8b348b0a02548a97f69f57a73
SHA512

8d4db05b72fca34c1bf5cb7a9511ecba7898579520765a9f3ccf9a03f267e75170d4f0e4506ba2a17aa3653d489b53495a1b5f28985f2bf987dd68ab4b406137
SSDEEP

6144:aP3OJRMhFt0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7:aP3ORMhwHEAJLjpFv6w2K/PkFtlVMHFm

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5de8de3a6f666fed24a4705d15c78a8c_JaffaCakes118
- Size
  
  381KB
- MD5
  
  5de8de3a6f666fed24a4705d15c78a8c
- SHA1
  
  cf7bac544862e577f2ed45964c7cdc3b43bcda84
- SHA256
  
  92425b864adb5bb77dce2d026237ab79d5924bd8b348b0a02548a97f69f57a73
- SHA512
  
  8d4db05b72fca34c1bf5cb7a9511ecba7898579520765a9f3ccf9a03f267e75170d4f0e4506ba2a17aa3653d489b53495a1b5f28985f2bf987dd68ab4b406137
- SSDEEP
  
  6144:aP3OJRMhFt0HEAT1fxhcMxW2pL7lv6w2K/PkFtR6sFHYnHFWhTyHVEOSQTQiJY7:aP3ORMhwHEAJLjpFv6w2K/PkFtlVMHFm
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2