ea59ee42e3fc30b26db9e6bdecac3372948a07ff067325df0a50f88fbf658192 | Triage

Sharing

General

Target

abeae897d3ec165f481377d451dba0cb_JaffaCakes118
Size

228KB
Sample

240819-v21lrs1aqj
MD5

abeae897d3ec165f481377d451dba0cb
SHA1

28e9765c41870bd6669ff7c22f5d8c1de7d2f1c9
SHA256

ea59ee42e3fc30b26db9e6bdecac3372948a07ff067325df0a50f88fbf658192
SHA512

45eed0b879e2dbc9ed34f07856ead27b4734c73abd57d0b78e16ea3e88b628547e86c1ed54e0902950011143a0162b3ec21f54b11117c6d3bb4dcea14aa0f2f6
SSDEEP

6144:wt9d/LWPEz2gof2dgHga9eUN5WA7icAvFvGwh:mZLWPDjf2dgAaUUN5R7AF

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  abeae897d3ec165f481377d451dba0cb_JaffaCakes118
- Size
  
  228KB
- MD5
  
  abeae897d3ec165f481377d451dba0cb
- SHA1
  
  28e9765c41870bd6669ff7c22f5d8c1de7d2f1c9
- SHA256
  
  ea59ee42e3fc30b26db9e6bdecac3372948a07ff067325df0a50f88fbf658192
- SHA512
  
  45eed0b879e2dbc9ed34f07856ead27b4734c73abd57d0b78e16ea3e88b628547e86c1ed54e0902950011143a0162b3ec21f54b11117c6d3bb4dcea14aa0f2f6
- SSDEEP
  
  6144:wt9d/LWPEz2gof2dgHga9eUN5WA7icAvFvGwh:mZLWPDjf2dgAaUUN5R7AF
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan