307dda0e5477498c0f073b9d5e4e3574691f10579627481ad91744e22e5a7075 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d07bc6c135b64c3597b6f6cf8716edb6_JaffaCakes118
Size

820KB
Sample

240906-1az4taydrn
MD5

d07bc6c135b64c3597b6f6cf8716edb6
SHA1

3f3518b51dea79ee4312c95d8b6d822fe7ca827f
SHA256

307dda0e5477498c0f073b9d5e4e3574691f10579627481ad91744e22e5a7075
SHA512

00b48072ce34766b56ced5c3d1ade24a308ed369654879a72929819d37f192c2f6c13ecac6d06f535f7b3a8ef1375c4b1411636a4a32728e7f9505ee0604f7dc
SSDEEP

24576:p2RYBCfsVTuXoFx+kA6PTczqCKHu61uQaMeGfo:p3U0Z8oFEkdczqCKHu61g+o

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  d07bc6c135b64c3597b6f6cf8716edb6_JaffaCakes118
- Size
  
  820KB
- MD5
  
  d07bc6c135b64c3597b6f6cf8716edb6
- SHA1
  
  3f3518b51dea79ee4312c95d8b6d822fe7ca827f
- SHA256
  
  307dda0e5477498c0f073b9d5e4e3574691f10579627481ad91744e22e5a7075
- SHA512
  
  00b48072ce34766b56ced5c3d1ade24a308ed369654879a72929819d37f192c2f6c13ecac6d06f535f7b3a8ef1375c4b1411636a4a32728e7f9505ee0604f7dc
- SSDEEP
  
  24576:p2RYBCfsVTuXoFx+kA6PTczqCKHu61uQaMeGfo:p3U0Z8oFEkdczqCKHu61g+o
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan