47b36726f69c3b604b2fd6589e18e6a0c97d3a0bb5179f7ca98a62d88dc0ed78 | Triage

Sharing

General

Target

cf6af6e0d0cd184958e5d8ba4458dba5_JaffaCakes118
Size

464KB
Sample

240906-nbgbwatenc
MD5

cf6af6e0d0cd184958e5d8ba4458dba5
SHA1

588325db853262ff446ecbc5991f1f87772f5e09
SHA256

47b36726f69c3b604b2fd6589e18e6a0c97d3a0bb5179f7ca98a62d88dc0ed78
SHA512

179d60fa10b7de02e2e46a7513cac5aa968a33ac1f58426ca27cd2ff7bff870091aa34f20b8597a722ad1900a6bfe5a6ef9a9a0fbf3f2fc86d6af1d9afd27ffa
SSDEEP

12288:NQUJwUWs0DcW+smXWvbSed/T7Sdabv8Lh0zK:NQUlWBDcs/eeN6y+hwK

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  cf6af6e0d0cd184958e5d8ba4458dba5_JaffaCakes118
- Size
  
  464KB
- MD5
  
  cf6af6e0d0cd184958e5d8ba4458dba5
- SHA1
  
  588325db853262ff446ecbc5991f1f87772f5e09
- SHA256
  
  47b36726f69c3b604b2fd6589e18e6a0c97d3a0bb5179f7ca98a62d88dc0ed78
- SHA512
  
  179d60fa10b7de02e2e46a7513cac5aa968a33ac1f58426ca27cd2ff7bff870091aa34f20b8597a722ad1900a6bfe5a6ef9a9a0fbf3f2fc86d6af1d9afd27ffa
- SSDEEP
  
  12288:NQUJwUWs0DcW+smXWvbSed/T7Sdabv8Lh0zK:NQUlWBDcs/eeN6y+hwK
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan