d8ee9b27dbf6ec5e1ecf9df23eea5ea75930ce33d8604584f2d92e896887fdd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa9a6e363493773110c6e9c3662af850_JaffaCakes118
Size

40KB
Sample

240819-l9a7eaybjh
MD5

aa9a6e363493773110c6e9c3662af850
SHA1

7f7ceb6989ea87252010d001064c1663994c3996
SHA256

d8ee9b27dbf6ec5e1ecf9df23eea5ea75930ce33d8604584f2d92e896887fdd1
SHA512

6d91c16937b060c9aa26a35629f6abad05842131f98a656f39106e85377293f49e004acd2610b45ddc0713f6abc0a1f8d504dcc7ec0424447be3df0b623641e0
SSDEEP

768:y5IKfVlyK9Y811arjtOyIo0hvVWjpDp4gWaUqi7FLwpgvwuIYCP:yuKAIYAgOyIo0hfg5UMph

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  aa9a6e363493773110c6e9c3662af850_JaffaCakes118
- Size
  
  40KB
- MD5
  
  aa9a6e363493773110c6e9c3662af850
- SHA1
  
  7f7ceb6989ea87252010d001064c1663994c3996
- SHA256
  
  d8ee9b27dbf6ec5e1ecf9df23eea5ea75930ce33d8604584f2d92e896887fdd1
- SHA512
  
  6d91c16937b060c9aa26a35629f6abad05842131f98a656f39106e85377293f49e004acd2610b45ddc0713f6abc0a1f8d504dcc7ec0424447be3df0b623641e0
- SSDEEP
  
  768:y5IKfVlyK9Y811arjtOyIo0hvVWjpDp4gWaUqi7FLwpgvwuIYCP:yuKAIYAgOyIo0hfg5UMph
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Windows security modification
  evasion trojan
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan