69ac0a2c71ff729a68c58620cacf1a9c56656684c6a3080b887518247becc1a1 | Triage

Sharing

General

Target

5c467a6d63e504bddb4874f2a6d0f3ac_JaffaCakes118
Size

394KB
Sample

240719-rg4adavepk
MD5

5c467a6d63e504bddb4874f2a6d0f3ac
SHA1

3dbf2b46825b95ad38d8623b95ba63eea66e971b
SHA256

69ac0a2c71ff729a68c58620cacf1a9c56656684c6a3080b887518247becc1a1
SHA512

73f49bcfb1348e5af205d0626d389f7833bfae912bf4ea558839cfa64062f556accbd13127734a07642231157dddc1817df10fe35f09047f4a61e480cb148349
SSDEEP

6144:4a+yKkmd5SJhSTAlXBQUBImCdkXbx0DlI14XyIhIsC9Gvim:F3wd5shST8BQUvCEbOGUhIsmGq

Score

10^/10

evasion trojan

Malware Config

Targets

- Target
  
  5c467a6d63e504bddb4874f2a6d0f3ac_JaffaCakes118
- Size
  
  394KB
- MD5
  
  5c467a6d63e504bddb4874f2a6d0f3ac
- SHA1
  
  3dbf2b46825b95ad38d8623b95ba63eea66e971b
- SHA256
  
  69ac0a2c71ff729a68c58620cacf1a9c56656684c6a3080b887518247becc1a1
- SHA512
  
  73f49bcfb1348e5af205d0626d389f7833bfae912bf4ea558839cfa64062f556accbd13127734a07642231157dddc1817df10fe35f09047f4a61e480cb148349
- SSDEEP
  
  6144:4a+yKkmd5SJhSTAlXBQUBImCdkXbx0DlI14XyIhIsC9Gvim:F3wd5shST8BQUvCEbOGUhIsmGq
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2