1e383434e1ca0c1056f308b52fcf5c83a590dcc506b579b8cc5fa4971290a65e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36eeb89083bfea20d99dcb379202f97_JaffaCakes118
Size

359KB
Sample

240908-d16b7avgme
MD5

d36eeb89083bfea20d99dcb379202f97
SHA1

16e004bd4ae556abb879b11b1c106d9c7b05c382
SHA256

1e383434e1ca0c1056f308b52fcf5c83a590dcc506b579b8cc5fa4971290a65e
SHA512

83313ff0b288d39151bf4a5fbeed19fe28dcbd3d66c76c3d56064fc9299b903e655359639e1dae56ba9610e24a5cebbdba5379923cafcb81418350c9c7271d5a
SSDEEP

6144:gSBHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:gSBR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  d36eeb89083bfea20d99dcb379202f97_JaffaCakes118
- Size
  
  359KB
- MD5
  
  d36eeb89083bfea20d99dcb379202f97
- SHA1
  
  16e004bd4ae556abb879b11b1c106d9c7b05c382
- SHA256
  
  1e383434e1ca0c1056f308b52fcf5c83a590dcc506b579b8cc5fa4971290a65e
- SHA512
  
  83313ff0b288d39151bf4a5fbeed19fe28dcbd3d66c76c3d56064fc9299b903e655359639e1dae56ba9610e24a5cebbdba5379923cafcb81418350c9c7271d5a
- SSDEEP
  
  6144:gSBHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:gSBR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2