15c1275210ffbfb8928fdb9b34944a75b39576bd8e4427a9d3426f6579f1705d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0fbe082b498fdd31b577146ff7a1a49_JaffaCakes118
Size

328KB
Sample

240817-dnyrksxcqj
MD5

a0fbe082b498fdd31b577146ff7a1a49
SHA1

b149289ac1a1bdbf8ab98514f85a8e4b171412df
SHA256

15c1275210ffbfb8928fdb9b34944a75b39576bd8e4427a9d3426f6579f1705d
SHA512

016aba37f6bdd9349053df136bb42df048e17c4f884b32f36a65cf67a38b226f43336056d264a61988fc5038d0df566213def93ca00446cc58332f3e942ca4a6
SSDEEP

6144:GAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4a:f9Y5ioSsC5+BIK4Tg9EEigR

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  a0fbe082b498fdd31b577146ff7a1a49_JaffaCakes118
- Size
  
  328KB
- MD5
  
  a0fbe082b498fdd31b577146ff7a1a49
- SHA1
  
  b149289ac1a1bdbf8ab98514f85a8e4b171412df
- SHA256
  
  15c1275210ffbfb8928fdb9b34944a75b39576bd8e4427a9d3426f6579f1705d
- SHA512
  
  016aba37f6bdd9349053df136bb42df048e17c4f884b32f36a65cf67a38b226f43336056d264a61988fc5038d0df566213def93ca00446cc58332f3e942ca4a6
- SSDEEP
  
  6144:GAK8PwjNi1eM3OcQ7C5ytkvG6hQOAtEiWSbj8Tg9tyE7ejCd4a:f9Y5ioSsC5+BIK4Tg9EEigR
Score

10^/10

discovery evasion persistence trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2