23ef37dcfc40be10d25afb164c77f10bb7968507b22ac6edba22c80024e82408 | Triage

Sharing

General

Target

d1f4804074971247b052c142932c5256_JaffaCakes118
Size

874KB
Sample

240907-pwakhavhnm
MD5

d1f4804074971247b052c142932c5256
SHA1

bb0e8693b257b0ec6ea3cb8aa1e2798d8acd07b3
SHA256

23ef37dcfc40be10d25afb164c77f10bb7968507b22ac6edba22c80024e82408
SHA512

e3f2d1e486dde2a74f6f2a1fe9c73744ef756fef016f213d928d7e5adbc499a963a7226cf695c0253f166dca5570a49fb0014fc0afb246a9e48a2ebbf7a937aa
SSDEEP

24576:SVMLKmtvPyHu731QPK3y9pNg4W7HM86cN+2QHCHs:MiKmHyOCCp7s8PQl

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  d1f4804074971247b052c142932c5256_JaffaCakes118
- Size
  
  874KB
- MD5
  
  d1f4804074971247b052c142932c5256
- SHA1
  
  bb0e8693b257b0ec6ea3cb8aa1e2798d8acd07b3
- SHA256
  
  23ef37dcfc40be10d25afb164c77f10bb7968507b22ac6edba22c80024e82408
- SHA512
  
  e3f2d1e486dde2a74f6f2a1fe9c73744ef756fef016f213d928d7e5adbc499a963a7226cf695c0253f166dca5570a49fb0014fc0afb246a9e48a2ebbf7a937aa
- SSDEEP
  
  24576:SVMLKmtvPyHu731QPK3y9pNg4W7HM86cN+2QHCHs:MiKmHyOCCp7s8PQl
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan