7fd6fc99d5c5666abe0e27973c284bdcee58f098fc2ac7070db7d048f5794553 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

866ff49fb82ab392ec60ef8ec4fb2bca_JaffaCakes118
Size

518KB
Sample

240810-ryhd8sxfpb
MD5

866ff49fb82ab392ec60ef8ec4fb2bca
SHA1

de9b1e91bf31fd22117048fa2cb3a1952e052db9
SHA256

7fd6fc99d5c5666abe0e27973c284bdcee58f098fc2ac7070db7d048f5794553
SHA512

cb161f23538e135185545f0979882489cfa9069c9ed381d8ed9fc2353b1924184c54b41acdbecd6f3ea98608900847884bbbae12ce90955ae6a700a4ef66626d
SSDEEP

6144:4RSL8gcrglKspJm7WyjmvuOkoacVYstVTDHxDzxYJVOsCeXOVHadb/dnCMiby5IV:w7rglKspsVK1JPKVOGdTdF5NUOmcgDH

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  866ff49fb82ab392ec60ef8ec4fb2bca_JaffaCakes118
- Size
  
  518KB
- MD5
  
  866ff49fb82ab392ec60ef8ec4fb2bca
- SHA1
  
  de9b1e91bf31fd22117048fa2cb3a1952e052db9
- SHA256
  
  7fd6fc99d5c5666abe0e27973c284bdcee58f098fc2ac7070db7d048f5794553
- SHA512
  
  cb161f23538e135185545f0979882489cfa9069c9ed381d8ed9fc2353b1924184c54b41acdbecd6f3ea98608900847884bbbae12ce90955ae6a700a4ef66626d
- SSDEEP
  
  6144:4RSL8gcrglKspJm7WyjmvuOkoacVYstVTDHxDzxYJVOsCeXOVHadb/dnCMiby5IV:w7rglKspsVK1JPKVOGdTdF5NUOmcgDH
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan