61a9d2267f27873876923496331584b520c0814096128d2e9ed5fa03e6907e0c | Triage

Sharing

General

Target

c90272e9d08724552e8d470351f7a269_JaffaCakes118
Size

56KB
Sample

240829-rt2bjsyckq
MD5

c90272e9d08724552e8d470351f7a269
SHA1

5b97b60b0acd21d52e7400c3056a7b9d00bf20b0
SHA256

61a9d2267f27873876923496331584b520c0814096128d2e9ed5fa03e6907e0c
SHA512

aa7ce2ad1ebf34113e79a34af8234f9400a7f9059005bee17abf89bc4a57ffa3dccdf95cab55c4002b66749cfd7d424c126efbb8382d6387388f71d4a11ba717
SSDEEP

768:JDjGoaib4D6jerRgLNIJrG0aUY8TVGueNSJH5NZOufP0J/6cgd66V1SNORuTrD1:JN3vQGiJrhyQPqSJtOK0JixV1qZ

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  c90272e9d08724552e8d470351f7a269_JaffaCakes118
- Size
  
  56KB
- MD5
  
  c90272e9d08724552e8d470351f7a269
- SHA1
  
  5b97b60b0acd21d52e7400c3056a7b9d00bf20b0
- SHA256
  
  61a9d2267f27873876923496331584b520c0814096128d2e9ed5fa03e6907e0c
- SHA512
  
  aa7ce2ad1ebf34113e79a34af8234f9400a7f9059005bee17abf89bc4a57ffa3dccdf95cab55c4002b66749cfd7d424c126efbb8382d6387388f71d4a11ba717
- SSDEEP
  
  768:JDjGoaib4D6jerRgLNIJrG0aUY8TVGueNSJH5NZOufP0J/6cgd66V1SNORuTrD1:JN3vQGiJrhyQPqSJtOK0JixV1qZ
Score

7^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan