21470d4b99d4afbca480a1dd896638babcea1f51e4bbceeac9dea1cd8b2f292e | Triage

Sharing

General

Target

bfea4675295e4a8ead5b26fa5ea3419d_JaffaCakes118
Size

876KB
Sample

240825-dhgk4stbne
MD5

bfea4675295e4a8ead5b26fa5ea3419d
SHA1

531a472f08ec742442acc39967d903a91da9bbd1
SHA256

21470d4b99d4afbca480a1dd896638babcea1f51e4bbceeac9dea1cd8b2f292e
SHA512

959c78718891ab5b8432890297c30ee17940f563e06703166159f5f868fc6fa77beddf01c7cc4b774ba85f370fff964fee14802227de3af2cadc7121dfb8e04b
SSDEEP

24576:G4MLKmtvPyHu7h8v5aLy9pNg4W7HMc/cN+2QHCAFb:BiKmHyOFo5aPp7scGQD

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  bfea4675295e4a8ead5b26fa5ea3419d_JaffaCakes118
- Size
  
  876KB
- MD5
  
  bfea4675295e4a8ead5b26fa5ea3419d
- SHA1
  
  531a472f08ec742442acc39967d903a91da9bbd1
- SHA256
  
  21470d4b99d4afbca480a1dd896638babcea1f51e4bbceeac9dea1cd8b2f292e
- SHA512
  
  959c78718891ab5b8432890297c30ee17940f563e06703166159f5f868fc6fa77beddf01c7cc4b774ba85f370fff964fee14802227de3af2cadc7121dfb8e04b
- SSDEEP
  
  24576:G4MLKmtvPyHu7h8v5aLy9pNg4W7HMc/cN+2QHCAFb:BiKmHyOFo5aPp7scGQD
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan