dbd32941de1bed32cb31dc6d39feb5bf0b74fde3dcd82a34c430462d42e1f533 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76189fe617a31aef06e1285de0c0b0fc_JaffaCakes118
Size

359KB
Sample

240726-2zepvazfrl
MD5

76189fe617a31aef06e1285de0c0b0fc
SHA1

682ffe06c834041d726563a197e4fcd0a2d7a6e8
SHA256

dbd32941de1bed32cb31dc6d39feb5bf0b74fde3dcd82a34c430462d42e1f533
SHA512

bbf795a34e0515658fcca58177add02cd5230ca1d764e95b03e40e74a9d9cc56534e1518cfa1ab5f85c64261c57c0539fc6ea77587790eafe132cb46943c7943
SSDEEP

6144:gSfHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:gSfR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  76189fe617a31aef06e1285de0c0b0fc_JaffaCakes118
- Size
  
  359KB
- MD5
  
  76189fe617a31aef06e1285de0c0b0fc
- SHA1
  
  682ffe06c834041d726563a197e4fcd0a2d7a6e8
- SHA256
  
  dbd32941de1bed32cb31dc6d39feb5bf0b74fde3dcd82a34c430462d42e1f533
- SHA512
  
  bbf795a34e0515658fcca58177add02cd5230ca1d764e95b03e40e74a9d9cc56534e1518cfa1ab5f85c64261c57c0539fc6ea77587790eafe132cb46943c7943
- SSDEEP
  
  6144:gSfHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:gSfR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2