f47cd1ff216eabb2bc0a777f9c827c2975b69133d31570b6d8114f9cada3361e | Triage

Sharing

General

Target

cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118
Size

103KB
Sample

240906-swmfvavalc
MD5

cfda539c20c2d2b2b8b803391f6e820a
SHA1

f80de74aa959ea46c311015aba74992ef11cc5b8
SHA256

f47cd1ff216eabb2bc0a777f9c827c2975b69133d31570b6d8114f9cada3361e
SHA512

1b9ccee60b813e352b24c7930c7398775ef6688c38484ee5e5a90337a17faf6667c12288e3cdf83c161a9ebdb2ed94a009a898c8b454fedb000669ed5cd56ec8
SSDEEP

3072:F0+ODLbYZIhbiwcg0QaTEFXc6HjS2aUsc6HcT66vlmQ90TDyrPGvLvHjvfrH/zjo:xcbYZquwr0VTEFXc6HjdaUsc6HcT66vd

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  cfda539c20c2d2b2b8b803391f6e820a_JaffaCakes118
- Size
  
  103KB
- MD5
  
  cfda539c20c2d2b2b8b803391f6e820a
- SHA1
  
  f80de74aa959ea46c311015aba74992ef11cc5b8
- SHA256
  
  f47cd1ff216eabb2bc0a777f9c827c2975b69133d31570b6d8114f9cada3361e
- SHA512
  
  1b9ccee60b813e352b24c7930c7398775ef6688c38484ee5e5a90337a17faf6667c12288e3cdf83c161a9ebdb2ed94a009a898c8b454fedb000669ed5cd56ec8
- SSDEEP
  
  3072:F0+ODLbYZIhbiwcg0QaTEFXc6HjS2aUsc6HcT66vlmQ90TDyrPGvLvHjvfrH/zjo:xcbYZquwr0VTEFXc6HjdaUsc6HcT66vd
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Change Default File Association

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Event Triggered Execution

Change Default File Association

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan