f0a2becc0d2b82abbb731ca71c452ef2e7ddde39f98c84049e9f96c594a8081f | Triage

Sharing

General

Target

d52bb0bd988ab322cdef6cc93d03cf19_JaffaCakes118
Size

810KB
Sample

240908-1z8r9axeqk
MD5

d52bb0bd988ab322cdef6cc93d03cf19
SHA1

4eb582a8de8239cf907ce9fc893e37da9a213e77
SHA256

f0a2becc0d2b82abbb731ca71c452ef2e7ddde39f98c84049e9f96c594a8081f
SHA512

b0750e29ffc308598b4fd3a5563256e2e782ad5bb138818788b12f5e803d219cbdb0193bf8a0ce603fdfad2ed5872612076c935cc3fa1ccb82476f940381a1c8
SSDEEP

24576:pRXhWDgioEli7RJQulN7pZfS8MrQKo5Prbf:rsDIplN7pZDMsKUPf

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  d52bb0bd988ab322cdef6cc93d03cf19_JaffaCakes118
- Size
  
  810KB
- MD5
  
  d52bb0bd988ab322cdef6cc93d03cf19
- SHA1
  
  4eb582a8de8239cf907ce9fc893e37da9a213e77
- SHA256
  
  f0a2becc0d2b82abbb731ca71c452ef2e7ddde39f98c84049e9f96c594a8081f
- SHA512
  
  b0750e29ffc308598b4fd3a5563256e2e782ad5bb138818788b12f5e803d219cbdb0193bf8a0ce603fdfad2ed5872612076c935cc3fa1ccb82476f940381a1c8
- SSDEEP
  
  24576:pRXhWDgioEli7RJQulN7pZfS8MrQKo5Prbf:rsDIplN7pZDMsKUPf
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan