925b16c33952deb10946827deb836f02466ec800ce1039a8d2d1e78899002ef4 | Triage

Sharing

General

Target

5ac0eb9604c357a7f4b351433e80e1d8_JaffaCakes118
Size

360KB
Sample

240719-gwev8azbjf
MD5

5ac0eb9604c357a7f4b351433e80e1d8
SHA1

54aeb4ff355542ea7eba526984a73821566a6d34
SHA256

925b16c33952deb10946827deb836f02466ec800ce1039a8d2d1e78899002ef4
SHA512

c842cf646b1c6c62e99173239bd6fbee1833c9afa9101e26219e8a1accfc553ffe07d67e5eff8d33100f14f01bf3d3a874e0649835c338bca4772272d3362482
SSDEEP

6144:5JiyLwzkJcaf9FViWO7VIgBVj5QsJpzBWTrX21MhRj0UR+lvE6QtRuEh6+heD:3p5JlFbsVIuFH7BWnX21MP0Uh6QL5

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  5ac0eb9604c357a7f4b351433e80e1d8_JaffaCakes118
- Size
  
  360KB
- MD5
  
  5ac0eb9604c357a7f4b351433e80e1d8
- SHA1
  
  54aeb4ff355542ea7eba526984a73821566a6d34
- SHA256
  
  925b16c33952deb10946827deb836f02466ec800ce1039a8d2d1e78899002ef4
- SHA512
  
  c842cf646b1c6c62e99173239bd6fbee1833c9afa9101e26219e8a1accfc553ffe07d67e5eff8d33100f14f01bf3d3a874e0649835c338bca4772272d3362482
- SSDEEP
  
  6144:5JiyLwzkJcaf9FViWO7VIgBVj5QsJpzBWTrX21MhRj0UR+lvE6QtRuEh6+heD:3p5JlFbsVIuFH7BWnX21MP0Uh6QL5
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2