48dc0a5554fe7bef2c02ff55430c8b402bb7f284664df36f88ede9b874243aa3 | Triage

Sharing

General

Target

b951b0c88a6080f49a41e7231f93e6b3_JaffaCakes118
Size

371KB
Sample

240822-15hg9a1akg
MD5

b951b0c88a6080f49a41e7231f93e6b3
SHA1

e9bb6e7420358860cbb4e8bfbf9f36c2310164de
SHA256

48dc0a5554fe7bef2c02ff55430c8b402bb7f284664df36f88ede9b874243aa3
SHA512

a5c0c7d65471201cbaaddc83df8b6eed7c52d82e97424ce08aa991c33662ae11fedb9eb612a7d9ce0cf6fe1f1027434d754dc9e5be54ad22e544d51e1bb1e5d2
SSDEEP

6144:cnRMbkVKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1KpU:WRMb4L9/u5Wcxr8/frTzcNS0G3fDsf1D

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  b951b0c88a6080f49a41e7231f93e6b3_JaffaCakes118
- Size
  
  371KB
- MD5
  
  b951b0c88a6080f49a41e7231f93e6b3
- SHA1
  
  e9bb6e7420358860cbb4e8bfbf9f36c2310164de
- SHA256
  
  48dc0a5554fe7bef2c02ff55430c8b402bb7f284664df36f88ede9b874243aa3
- SHA512
  
  a5c0c7d65471201cbaaddc83df8b6eed7c52d82e97424ce08aa991c33662ae11fedb9eb612a7d9ce0cf6fe1f1027434d754dc9e5be54ad22e544d51e1bb1e5d2
- SSDEEP
  
  6144:cnRMbkVKP9EoxGcTYNh91DQJ7w6Mcx8MYeWKnEWYzXTz+VNypJOVglH5fDsf1KpU:WRMb4L9/u5Wcxr8/frTzcNS0G3fDsf1D
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2