0b37fc103ab4c89ebce91ffb69971f8eebe988ea0de7fcbe377aa938980ede26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d28c3e60d86f64ed9408b2aad511a7d0_JaffaCakes118
Size

807KB
Sample

240907-wtrjkazbmb
MD5

d28c3e60d86f64ed9408b2aad511a7d0
SHA1

1a28b4f00242740e3cf2deede117af9644563055
SHA256

0b37fc103ab4c89ebce91ffb69971f8eebe988ea0de7fcbe377aa938980ede26
SHA512

c984cc02762d5ce39ace8bfe195ad477104e6d9d06517c57e272e8e8c766faf2be4005e75a51a373f7648f869a6a4814c795a74fdd64e5797b1cd9a0019b10eb
SSDEEP

12288:JGuWdram1vbkfez51SE9JT3Xhg87iDqYtM2gXdEFH5KjI12YF8XX2FFR:cuWJkWF3Hm2Y8UH5KSTW2FFR

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  d28c3e60d86f64ed9408b2aad511a7d0_JaffaCakes118
- Size
  
  807KB
- MD5
  
  d28c3e60d86f64ed9408b2aad511a7d0
- SHA1
  
  1a28b4f00242740e3cf2deede117af9644563055
- SHA256
  
  0b37fc103ab4c89ebce91ffb69971f8eebe988ea0de7fcbe377aa938980ede26
- SHA512
  
  c984cc02762d5ce39ace8bfe195ad477104e6d9d06517c57e272e8e8c766faf2be4005e75a51a373f7648f869a6a4814c795a74fdd64e5797b1cd9a0019b10eb
- SSDEEP
  
  12288:JGuWdram1vbkfez51SE9JT3Xhg87iDqYtM2gXdEFH5KjI12YF8XX2FFR:cuWJkWF3Hm2Y8UH5KSTW2FFR
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan