c752d448aad972e770c57c12dd355acfc2f259cf57bde723bfa7be805567b3aa | Triage

Sharing

General

Target

beae85413988873aec4fd24c341ade9e_JaffaCakes118
Size

878KB
Sample

240824-qnn9cssbmb
MD5

beae85413988873aec4fd24c341ade9e
SHA1

60a46d9138a2301c0f9b6a0c2aefe5fd33a8a0e2
SHA256

c752d448aad972e770c57c12dd355acfc2f259cf57bde723bfa7be805567b3aa
SHA512

a54f13f0cd9eca1fc264b2c3c4ac6164b1def48f0b18b2d48e9bbde228894e603c69b5e8f3a81620514adb013137a0250460168225c95ed5875c7d2494395ce5
SSDEEP

24576:xnRsfIgOwlxp19Dy93hnzKWmAecCilvndxNZ:xnRsfTV1wCWmRcLndvZ

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  beae85413988873aec4fd24c341ade9e_JaffaCakes118
- Size
  
  878KB
- MD5
  
  beae85413988873aec4fd24c341ade9e
- SHA1
  
  60a46d9138a2301c0f9b6a0c2aefe5fd33a8a0e2
- SHA256
  
  c752d448aad972e770c57c12dd355acfc2f259cf57bde723bfa7be805567b3aa
- SHA512
  
  a54f13f0cd9eca1fc264b2c3c4ac6164b1def48f0b18b2d48e9bbde228894e603c69b5e8f3a81620514adb013137a0250460168225c95ed5875c7d2494395ce5
- SSDEEP
  
  24576:xnRsfIgOwlxp19Dy93hnzKWmAecCilvndxNZ:xnRsfTV1wCWmRcLndvZ
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2