079f1f5ec5d266bf0eb1073ad63befa086dc19b21df0462211bf997a74f6e214 | Triage

Sharing

General

Target

8e246a578f7aa508436f2256187e006c_JaffaCakes118
Size

499KB
Sample

240812-k3f9eathnn
MD5

8e246a578f7aa508436f2256187e006c
SHA1

ce320d68d4cb2ebdeb58b99f2c62f90344534d85
SHA256

079f1f5ec5d266bf0eb1073ad63befa086dc19b21df0462211bf997a74f6e214
SHA512

4f9caf196c857f11902acc190b83e152677f60a9ac7769ae68f6dcdef1b467a10f85ef85712307107ea8f04cc451ca6e23d69d4aad4bc9cde3a9a51f064b8c32
SSDEEP

6144:CihvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:CcMZu2z96dcYXPnpcJPydjZ

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  8e246a578f7aa508436f2256187e006c_JaffaCakes118
- Size
  
  499KB
- MD5
  
  8e246a578f7aa508436f2256187e006c
- SHA1
  
  ce320d68d4cb2ebdeb58b99f2c62f90344534d85
- SHA256
  
  079f1f5ec5d266bf0eb1073ad63befa086dc19b21df0462211bf997a74f6e214
- SHA512
  
  4f9caf196c857f11902acc190b83e152677f60a9ac7769ae68f6dcdef1b467a10f85ef85712307107ea8f04cc451ca6e23d69d4aad4bc9cde3a9a51f064b8c32
- SSDEEP
  
  6144:CihvkZ8gulzV2V9/H5DTwaHd6dcNiXPnpUTJPyd+MElqwkp7:CcMZu2z96dcYXPnpcJPydjZ
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2