1e2f35487d928d5d1c5078d7fc7bd6667bd6f009c2d841dbb0efd9eb8a47d20d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce9e9fa271c49db863e26c410184b42a_JaffaCakes118
Size

372KB
Sample

240906-erenjsvgrl
MD5

ce9e9fa271c49db863e26c410184b42a
SHA1

856c7fc9fada497c6ed9aeb85b4a6a95584b6e13
SHA256

1e2f35487d928d5d1c5078d7fc7bd6667bd6f009c2d841dbb0efd9eb8a47d20d
SHA512

7f5344d5294c725ff9e5f55325a28a63d5310f62bbac84eb7f904042842fee030d66eac3d4ef9869ac976a0db72b5de0c1325bd81a3ed626a5beaaac49004bce
SSDEEP

6144:ZHZA1kbQVjPXhe/qc+FNbHsHTUCzutSEVxCWr3rgNMPeXxEwf5I71IjBnsz+2SB:Z/Q1PQIbMHIdtFxCaEN5XxEwxxmzCB

Score

8^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ce9e9fa271c49db863e26c410184b42a_JaffaCakes118
- Size
  
  372KB
- MD5
  
  ce9e9fa271c49db863e26c410184b42a
- SHA1
  
  856c7fc9fada497c6ed9aeb85b4a6a95584b6e13
- SHA256
  
  1e2f35487d928d5d1c5078d7fc7bd6667bd6f009c2d841dbb0efd9eb8a47d20d
- SHA512
  
  7f5344d5294c725ff9e5f55325a28a63d5310f62bbac84eb7f904042842fee030d66eac3d4ef9869ac976a0db72b5de0c1325bd81a3ed626a5beaaac49004bce
- SSDEEP
  
  6144:ZHZA1kbQVjPXhe/qc+FNbHsHTUCzutSEVxCWr3rgNMPeXxEwf5I71IjBnsz+2SB:Z/Q1PQIbMHIdtFxCaEN5XxEwxxmzCB
Score

8^/10

discovery evasion persistence trojan
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan