879fcb9b492bbf251c285879d0c78d4e2b77ca21b22ff89ec356110958fd77fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118
Size

365KB
Sample

240821-hfl52avajg
MD5

b2735ff8251132caaa6a4fe89723e6eb
SHA1

56797b32f34636ac930985a26e023e2762d6d277
SHA256

879fcb9b492bbf251c285879d0c78d4e2b77ca21b22ff89ec356110958fd77fd
SHA512

ea8fab3ded0c07d246de3a74ca4efdc459acb8c4d2132ec5cbfd98d1ca2eae0abe376baf62689da4394ce7230367261d08740f8b507b3c87aae56fe88850d3df
SSDEEP

6144:sRMUa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:sRMjx4ojf51aTcK0NEQUd0op3QlL

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b2735ff8251132caaa6a4fe89723e6eb_JaffaCakes118
- Size
  
  365KB
- MD5
  
  b2735ff8251132caaa6a4fe89723e6eb
- SHA1
  
  56797b32f34636ac930985a26e023e2762d6d277
- SHA256
  
  879fcb9b492bbf251c285879d0c78d4e2b77ca21b22ff89ec356110958fd77fd
- SHA512
  
  ea8fab3ded0c07d246de3a74ca4efdc459acb8c4d2132ec5cbfd98d1ca2eae0abe376baf62689da4394ce7230367261d08740f8b507b3c87aae56fe88850d3df
- SSDEEP
  
  6144:sRMUa4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:sRMjx4ojf51aTcK0NEQUd0op3QlL
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2