24b2dd06c3ae524551de3d6ec79bb47b26c92c9168810badfa3ff4b8867b4236 | Triage

Sharing

General

Target

6929304180d20033a3aedddb83e6532a_JaffaCakes118
Size

348KB
Sample

240723-16t8faveld
MD5

6929304180d20033a3aedddb83e6532a
SHA1

0a75a09485e57c38dcf6d129cc9d76911987d512
SHA256

24b2dd06c3ae524551de3d6ec79bb47b26c92c9168810badfa3ff4b8867b4236
SHA512

9fb7a18e6e4ba64ebd046f3840e577c68169b32610b875ff68edcf08e50a32b688a47ef4ed49ae691839a454da604b621a4bcf8e2ff14604e62d63bab08ec8dc
SSDEEP

6144:KzUbg3HKtRqL4605cAEUg12/CFIzs/kx/UjUw9TjYTsnprCDqKcnC0:KzUbKgZ6t4q2zsA/2dEInp2D

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  6929304180d20033a3aedddb83e6532a_JaffaCakes118
- Size
  
  348KB
- MD5
  
  6929304180d20033a3aedddb83e6532a
- SHA1
  
  0a75a09485e57c38dcf6d129cc9d76911987d512
- SHA256
  
  24b2dd06c3ae524551de3d6ec79bb47b26c92c9168810badfa3ff4b8867b4236
- SHA512
  
  9fb7a18e6e4ba64ebd046f3840e577c68169b32610b875ff68edcf08e50a32b688a47ef4ed49ae691839a454da604b621a4bcf8e2ff14604e62d63bab08ec8dc
- SSDEEP
  
  6144:KzUbg3HKtRqL4605cAEUg12/CFIzs/kx/UjUw9TjYTsnprCDqKcnC0:KzUbKgZ6t4q2zsA/2dEInp2D
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2