5047d6c3d984fd2e1c9ccd014aef7295d6845477120ad9ebb0f5656c358058ab | Triage

Sharing

General

Target

a1c3341a31af40f5fd01eeee51cb7d36_JaffaCakes118
Size

117KB
Sample

240817-jw468aycrm
MD5

a1c3341a31af40f5fd01eeee51cb7d36
SHA1

e9a7da9776bd33697905105452639b269b5b4c52
SHA256

5047d6c3d984fd2e1c9ccd014aef7295d6845477120ad9ebb0f5656c358058ab
SHA512

41515d8bb62de4b030629126f86b2a14d00262f287917526168c668dd8d9635c58fa91173cecb6de66d11e7c8798edb8e778a1430a3d869c504289574c78ef6e
SSDEEP

3072:lq/RAwDqj3kHLt0bGadREkQE7MpHLvvDs9++hWnujfKy:lUrWjYGCadRbVMpTvWQy

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  enigma-tdftrn.exe
- Size
  
  116KB
- MD5
  
  a4a15445b0bf8fe3d652a2ca63e7d202
- SHA1
  
  31ae5f0e5734cb33406a5039b503d048160c642b
- SHA256
  
  33c6038b4b571e511ae48b960a9ed78a2e18fc54ee9f956c93d1bade55e04e8b
- SHA512
  
  e518fba06c8d019597d7add38867289e8f3868c0dcf74ccf96ad768c469366c71db11d6c59f8ea76a4c01ead14e0aa0292fe57feb42ad99528263502cfca6011
- SSDEEP
  
  3072:7+7Xqj3kHLt0bGadRkCQDESXwUVlB7Pm9++hWnujfKI:YqjYGCadRiESXBnB7PcQI
Score

3^/10

discovery
behavioral1 behavioral2
- Target
  
  www.mogelpower.de.url
- Size
  
  49B
- MD5
  
  3f933ca047614b6168bd41c6e1bad4ef
- SHA1
  
  071c0e401442a894da1b7e98cbec931c62c3f4df
- SHA256
  
  848086f91839631470788b9e049d3be5458a6d0397c0ac738adf568368b53601
- SHA512
  
  6e5d0f5d397007661968f88f25ce4c44dc0de576b46b8f4893ef1bf3791f0f9e8e794aafb32bb7ae7bfa416611e70347b2b3745d60623406d8903439d5ff8baf
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryevasiontrojan

behavioral4