4426dc904e82052931a6d1c1c5e7cd0d13e6d45c74b420a207db57709fbebcfe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8883814f8061596a5535ddf1f590d13b_JaffaCakes118
Size

104KB
Sample

240811-b6d4satcma
MD5

8883814f8061596a5535ddf1f590d13b
SHA1

c6d9c261419dd064fabbbb8dcb7cc45a853802e4
SHA256

4426dc904e82052931a6d1c1c5e7cd0d13e6d45c74b420a207db57709fbebcfe
SHA512

8adddd97811e277ae47d0a0bf43ab879572f557500fc10f7e01ae31145b6b60b8af8d3acf22a5758a50491267a7a665df37ff4007392647b8f73e3f328923333
SSDEEP

1536:utYKBSpblrKP22kJTVwklUXTpuUFZFcYY3amF12YdtGzQ+y1nYhWOQ:gYaSNxeXkQk2XVuUFLcDq1cDnYQOQ

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  8883814f8061596a5535ddf1f590d13b_JaffaCakes118
- Size
  
  104KB
- MD5
  
  8883814f8061596a5535ddf1f590d13b
- SHA1
  
  c6d9c261419dd064fabbbb8dcb7cc45a853802e4
- SHA256
  
  4426dc904e82052931a6d1c1c5e7cd0d13e6d45c74b420a207db57709fbebcfe
- SHA512
  
  8adddd97811e277ae47d0a0bf43ab879572f557500fc10f7e01ae31145b6b60b8af8d3acf22a5758a50491267a7a665df37ff4007392647b8f73e3f328923333
- SSDEEP
  
  1536:utYKBSpblrKP22kJTVwklUXTpuUFZFcYY3amF12YdtGzQ+y1nYhWOQ:gYaSNxeXkQk2XVuUFLcDq1cDnYQOQ
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan