f89485122a71146dbd3a26bf0cfd98ea98c18cdae3f76ceeccd6c920ac7fec2e | Triage

Sharing

General

Target

bbebc13423ada3268c37f23408cd1efd_JaffaCakes118
Size

352KB
Sample

240823-qqpb5swfnf
MD5

bbebc13423ada3268c37f23408cd1efd
SHA1

846077f3084ba40dfb17f3d5b422fb4fe8379e37
SHA256

f89485122a71146dbd3a26bf0cfd98ea98c18cdae3f76ceeccd6c920ac7fec2e
SHA512

88313c06476cd17bd52d70b6003f421f93bb7faf37c262220c210c485b303f522861d85bb585b450c863c4627e592bfa28a569777f3977cfc6cc9840e5ce5816
SSDEEP

6144:w7tKdAk7d+gmLP2bF4oQjpfRmhSmF9D+Ez9ubifpQa/I0XgUI:w/kJm04oQjp50iEz9y+ia/I0dI

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  bbebc13423ada3268c37f23408cd1efd_JaffaCakes118
- Size
  
  352KB
- MD5
  
  bbebc13423ada3268c37f23408cd1efd
- SHA1
  
  846077f3084ba40dfb17f3d5b422fb4fe8379e37
- SHA256
  
  f89485122a71146dbd3a26bf0cfd98ea98c18cdae3f76ceeccd6c920ac7fec2e
- SHA512
  
  88313c06476cd17bd52d70b6003f421f93bb7faf37c262220c210c485b303f522861d85bb585b450c863c4627e592bfa28a569777f3977cfc6cc9840e5ce5816
- SSDEEP
  
  6144:w7tKdAk7d+gmLP2bF4oQjpfRmhSmF9D+Ez9ubifpQa/I0XgUI:w/kJm04oQjp50iEz9y+ia/I0dI
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2