4144c835690ce732a210ae58f32725741f7f3d83b5ba8d62893b557883a269b5 | Triage

Sharing

General

Target

ac2f9c931c360941abf3d73b58c607fa_JaffaCakes118
Size

90KB
Sample

240819-xm5chszhqg
MD5

ac2f9c931c360941abf3d73b58c607fa
SHA1

3bc48b58a78219bc56541fde98c71b7485ee3d6a
SHA256

4144c835690ce732a210ae58f32725741f7f3d83b5ba8d62893b557883a269b5
SHA512

87b5d5eaccbaf0c3a28cd0829b6f0bb2bbeaebc45a35157bbbb85b7fae8982964ba2f9891f798ca207cc0198940e90a5f170d00d1b1357e64d948a7a54fbf1da
SSDEEP

1536:xY9hMoIK7kaQtm3SnpfJp3Mz+BtmYfs0SesDqzBc5JCRmLhrzTQonHGwOki17:+PMwQTnxBXs0SHDqzB2oChrzEuOH

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ac2f9c931c360941abf3d73b58c607fa_JaffaCakes118
- Size
  
  90KB
- MD5
  
  ac2f9c931c360941abf3d73b58c607fa
- SHA1
  
  3bc48b58a78219bc56541fde98c71b7485ee3d6a
- SHA256
  
  4144c835690ce732a210ae58f32725741f7f3d83b5ba8d62893b557883a269b5
- SHA512
  
  87b5d5eaccbaf0c3a28cd0829b6f0bb2bbeaebc45a35157bbbb85b7fae8982964ba2f9891f798ca207cc0198940e90a5f170d00d1b1357e64d948a7a54fbf1da
- SSDEEP
  
  1536:xY9hMoIK7kaQtm3SnpfJp3Mz+BtmYfs0SesDqzBc5JCRmLhrzTQonHGwOki17:+PMwQTnxBXs0SHDqzB2oChrzEuOH
Score

10^/10

discovery evasion trojan
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Deletes itself
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan