ec1fd22c251f6248be6b37bb2bf6f2bdf35c3bd2aed33b57b6c434a153904920 | Triage

Sharing

General

Target

69370efc61d003d2d600d0485627517a_JaffaCakes118
Size

372KB
Sample

240723-2gcgrswapa
MD5

69370efc61d003d2d600d0485627517a
SHA1

7d1dc0d7651e8253293e7ed4d3980a62ad838e47
SHA256

ec1fd22c251f6248be6b37bb2bf6f2bdf35c3bd2aed33b57b6c434a153904920
SHA512

e3cd4c0513d91a4cb9330658432d84d07248577472eed18bf1a4e67bdab47b30970f4476faf6b924877c4d3ef4a2ab2b04d44645b4a32a1969b1c8d617bc1e21
SSDEEP

6144:mqT1jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:XvjVkCrSvoZNyl5fwD

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  69370efc61d003d2d600d0485627517a_JaffaCakes118
- Size
  
  372KB
- MD5
  
  69370efc61d003d2d600d0485627517a
- SHA1
  
  7d1dc0d7651e8253293e7ed4d3980a62ad838e47
- SHA256
  
  ec1fd22c251f6248be6b37bb2bf6f2bdf35c3bd2aed33b57b6c434a153904920
- SHA512
  
  e3cd4c0513d91a4cb9330658432d84d07248577472eed18bf1a4e67bdab47b30970f4476faf6b924877c4d3ef4a2ab2b04d44645b4a32a1969b1c8d617bc1e21
- SSDEEP
  
  6144:mqT1jvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:XvjVkCrSvoZNyl5fwD
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2