2ad3042899d08a1b949badecf15e298449d8e4758a12cfa356dfe6f652a47f0e | Triage

Sharing

General

Target

666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118
Size

359KB
Sample

240723-gwbhss1dje
MD5

666c51e59813ff6d92473df9c59dd7b4
SHA1

67d306e5e45a1f7b61500e6ba6e09b86908e2692
SHA256

2ad3042899d08a1b949badecf15e298449d8e4758a12cfa356dfe6f652a47f0e
SHA512

ded2c0850856633ac7173ef9b45a591c8cc156b1cfa9acdfb46dfc0a1c3b52612d6b5b1bf5a9f9f6fe720c2d84fd554f02cd829a92e50487fdea5137e601d55c
SSDEEP

6144:2uHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:2uR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118
- Size
  
  359KB
- MD5
  
  666c51e59813ff6d92473df9c59dd7b4
- SHA1
  
  67d306e5e45a1f7b61500e6ba6e09b86908e2692
- SHA256
  
  2ad3042899d08a1b949badecf15e298449d8e4758a12cfa356dfe6f652a47f0e
- SHA512
  
  ded2c0850856633ac7173ef9b45a591c8cc156b1cfa9acdfb46dfc0a1c3b52612d6b5b1bf5a9f9f6fe720c2d84fd554f02cd829a92e50487fdea5137e601d55c
- SSDEEP
  
  6144:2uHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:2uR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+
Score

10^/10

evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2