995e8fe400ed8bb87303d8a4c31b0c3acc1738364786808e1ce165f496a17299 | Triage

Sharing

General

Target

734aaab49ab3116a6b3d6caa99a82704_JaffaCakes118
Size

384KB
Sample

240726-kb8vcawhjr
MD5

734aaab49ab3116a6b3d6caa99a82704
SHA1

3ca5242d9d2b578c7e4b7371469f1b8ed647a801
SHA256

995e8fe400ed8bb87303d8a4c31b0c3acc1738364786808e1ce165f496a17299
SHA512

89e41683b7d2cc1abebf1e1eed0b451744acdcc7be4ba7eca3b96c88895e8536a8d3e38dcec7e99828b61d5f2a51c57f0cae2a024fe9c7055a5777077331f3ee
SSDEEP

6144:8lg+WjcGQvmxQmcX3h26OY0q4dVjZoee9sSY8SEJkDfuDIPa3URWXXnl1jrnC:87t3vmxQXX3h2z1PdJe9z4EmfPaseVlb

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  734aaab49ab3116a6b3d6caa99a82704_JaffaCakes118
- Size
  
  384KB
- MD5
  
  734aaab49ab3116a6b3d6caa99a82704
- SHA1
  
  3ca5242d9d2b578c7e4b7371469f1b8ed647a801
- SHA256
  
  995e8fe400ed8bb87303d8a4c31b0c3acc1738364786808e1ce165f496a17299
- SHA512
  
  89e41683b7d2cc1abebf1e1eed0b451744acdcc7be4ba7eca3b96c88895e8536a8d3e38dcec7e99828b61d5f2a51c57f0cae2a024fe9c7055a5777077331f3ee
- SSDEEP
  
  6144:8lg+WjcGQvmxQmcX3h26OY0q4dVjZoee9sSY8SEJkDfuDIPa3URWXXnl1jrnC:87t3vmxQXX3h2z1PdJe9z4EmfPaseVlb
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2