b44f3c188ef92605a99fab6f8f57ed846ce1fa1a1fdf50f017befa117f58960e | Triage

Sharing

General

Target

a899813a5b70b4ef029e29d64f242952_JaffaCakes118
Size

879KB
Sample

240818-25ft4azerg
MD5

a899813a5b70b4ef029e29d64f242952
SHA1

ef32fd5c3b7b1fb3960ab7c500229199f17965a3
SHA256

b44f3c188ef92605a99fab6f8f57ed846ce1fa1a1fdf50f017befa117f58960e
SHA512

cf6206f447fa1743c3649f936bd7410e37f227f3c2a13b2298ce8e4f0dd6c30638468a4f77473e1a9f953655a7434ec6d60ad7be87268512086017b2f5fd0afa
SSDEEP

24576:nqv9BWmR3IcMK2JCK3eUSfftEAr+0A5BD:nmXd73dO/D

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  155绿色软件站.url
- Size
  
  219B
- MD5
  
  3a1f2a8a3ef08ae269517a69ea918b2c
- SHA1
  
  7d2e6719702bc8472e045e010efa6ed3f7df4b5b
- SHA256
  
  66eafefa8bb0155e60828476bde6068573fe64a4fd0aa052eba074dbe85d46cd
- SHA512
  
  22203a78192cadc02d0f887247675925273a69e3be82ec1a331197f892216a282cc8f37c3ffbfb578a708244181037277b8cc6a40d8ec70cdf0feac5d80f8576
Score

1^/10
behavioral1 behavioral2
- Target
  
  DoIt.exe
- Size
  
  887KB
- MD5
  
  cee34941122951a4414a497f94880b86
- SHA1
  
  ead6ff480ca6d0ae4935bafd6954685a46b01b86
- SHA256
  
  2c0ff1bb4d365b31dc7718edda04acf3bad1e098119f588ace3887f053e2f0b9
- SHA512
  
  ba353d67201bc5857d1c5326ba222493a224000e05574aa9d1033a34a0f129faf020494891a9d3b0017a2b476cb20482a08c85823a7a2e6eb43079ff1c2e5b5b
- SSDEEP
  
  12288:f8X4+ysUIJJ96b3pvYeWsw6lVjvFzXhABel2LjQ77xjlx+AYZ8jF4C16yFu/7pMt:f8l8sJ9wxDw66dLjQ7tJPYKF4c6yF8u
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

discoveryevasiontrojan

behavioral4

discoveryevasiontrojan