cc8621e466bb18e25b1eb7f63fac0132483249a6ef4fedc56b8e14cec0f1842e | Triage

Sharing

General

Target

71582d8546ea6ee53ee9ce8bfca380f4_JaffaCakes118
Size

1.5MB
Sample

240725-1jd8pswerj
MD5

71582d8546ea6ee53ee9ce8bfca380f4
SHA1

6b52f8677041db3ac07e0baa0271a2bd0476f2cb
SHA256

cc8621e466bb18e25b1eb7f63fac0132483249a6ef4fedc56b8e14cec0f1842e
SHA512

8afe0ce93d3cb3578f088534bb32c47290f1ab4f7d5fd1083dffffd7fdc6f0035ab821b7af88e246a59b6f15401cdd8b7ae586a858eb75f79eb9358fec937402
SSDEEP

24576:2/1d25dSdfHfiL8j0Ar3E3RBFShSuU0xMVS90hQMhbze0aeU1IWuu63zOFNQ7Yrm:IQCfWk3UnSnxMVSwaT1IPpOFNUYr

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  71582d8546ea6ee53ee9ce8bfca380f4_JaffaCakes118
- Size
  
  1.5MB
- MD5
  
  71582d8546ea6ee53ee9ce8bfca380f4
- SHA1
  
  6b52f8677041db3ac07e0baa0271a2bd0476f2cb
- SHA256
  
  cc8621e466bb18e25b1eb7f63fac0132483249a6ef4fedc56b8e14cec0f1842e
- SHA512
  
  8afe0ce93d3cb3578f088534bb32c47290f1ab4f7d5fd1083dffffd7fdc6f0035ab821b7af88e246a59b6f15401cdd8b7ae586a858eb75f79eb9358fec937402
- SSDEEP
  
  24576:2/1d25dSdfHfiL8j0Ar3E3RBFShSuU0xMVS90hQMhbze0aeU1IWuu63zOFNQ7Yrm:IQCfWk3UnSnxMVSwaT1IPpOFNUYr
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan