2e6996d2dff1da5409b77fd2b2728606bbaec2b78a9c2464142056f129dba042 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aeaf9104f408c70385e63592f5cef423_JaffaCakes118
Size

464KB
Sample

240820-ldgpbatgrg
MD5

aeaf9104f408c70385e63592f5cef423
SHA1

042870a3f653e4405b89f7760eb8de700c4dd6dc
SHA256

2e6996d2dff1da5409b77fd2b2728606bbaec2b78a9c2464142056f129dba042
SHA512

713b8debb166b3d91f90bcfa87e53fb59ba166e9480f4f179dc58505a2e1a14cd17031dac3b6c21a82bc9b4ca3708111ba40167cb079f885be22d5d924c1d0dc
SSDEEP

12288:NQUJwUWs0DcW+smXWvbSed/T7Sdabv8Lh0zK:NQUlWBDcs/eeN6y+hwK

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  aeaf9104f408c70385e63592f5cef423_JaffaCakes118
- Size
  
  464KB
- MD5
  
  aeaf9104f408c70385e63592f5cef423
- SHA1
  
  042870a3f653e4405b89f7760eb8de700c4dd6dc
- SHA256
  
  2e6996d2dff1da5409b77fd2b2728606bbaec2b78a9c2464142056f129dba042
- SHA512
  
  713b8debb166b3d91f90bcfa87e53fb59ba166e9480f4f179dc58505a2e1a14cd17031dac3b6c21a82bc9b4ca3708111ba40167cb079f885be22d5d924c1d0dc
- SSDEEP
  
  12288:NQUJwUWs0DcW+smXWvbSed/T7Sdabv8Lh0zK:NQUlWBDcs/eeN6y+hwK
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan