9115f7f88e755dfaa7bc70287c49e2bc84ab7bd17084be74da1154d965784bbc | Triage

Sharing

General

Target

744a8caa18b194e9ca9f984053d247cd_JaffaCakes118
Size

423KB
Sample

240726-qygbha1djq
MD5

744a8caa18b194e9ca9f984053d247cd
SHA1

33ea8507e7ac5c5969e575bacfa33b59bfad1859
SHA256

9115f7f88e755dfaa7bc70287c49e2bc84ab7bd17084be74da1154d965784bbc
SHA512

ebb0d445c309f21afd86e3678a5ec3c6e547cd05cce812965bedb809466007c42637666cdab95aec548bfbc252b7409b993ad7a1caf55fd38143c4b5f0bffe21
SSDEEP

6144:qaSxZp4zkIwS3f9KcxmNQteOYOgk+nhv/hRB/c0tA1oZfVUMTPuPwUwyIBmKoviz:IrpvY8yefOgk+nhHDRA1o1lT0Emiz

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  744a8caa18b194e9ca9f984053d247cd_JaffaCakes118
- Size
  
  423KB
- MD5
  
  744a8caa18b194e9ca9f984053d247cd
- SHA1
  
  33ea8507e7ac5c5969e575bacfa33b59bfad1859
- SHA256
  
  9115f7f88e755dfaa7bc70287c49e2bc84ab7bd17084be74da1154d965784bbc
- SHA512
  
  ebb0d445c309f21afd86e3678a5ec3c6e547cd05cce812965bedb809466007c42637666cdab95aec548bfbc252b7409b993ad7a1caf55fd38143c4b5f0bffe21
- SSDEEP
  
  6144:qaSxZp4zkIwS3f9KcxmNQteOYOgk+nhv/hRB/c0tA1oZfVUMTPuPwUwyIBmKoviz:IrpvY8yefOgk+nhHDRA1o1lT0Emiz
Score

10^/10

discovery evasion trojan
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Looks for VMWare Tools registry key
  evasion
- Deletes itself
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2