cb353ec2f0152780ed8cc68d0ddbbba1ffb14bf281f0e4dd6773e57d54487559 | Triage

Sharing

General

Target

d5909c72e8b8e44ffb6d490a5e0b6d9c_JaffaCakes118
Size

870KB
Sample

240909-dp4n8a1fnd
MD5

d5909c72e8b8e44ffb6d490a5e0b6d9c
SHA1

39d63c0f4dc48a5cd12f27da8c551adabc6f5cfa
SHA256

cb353ec2f0152780ed8cc68d0ddbbba1ffb14bf281f0e4dd6773e57d54487559
SHA512

d5fe949a99daa1e0feb3de476a79bf5a32feff4cae21009842ff5a949986cf2732827abda507be36d2fb7722a808fb2de32c7cffb39674adff9355a5a62aae53
SSDEEP

12288:qRFoQmXGnfb9rbpRQss0DaEufyDCMOU6n9T8fnJnk2uc6zqhJsgII1mkE3WDxR4k:qHfPOwWBfyDCzU6wrunaJs1pywtKnCm

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  d5909c72e8b8e44ffb6d490a5e0b6d9c_JaffaCakes118
- Size
  
  870KB
- MD5
  
  d5909c72e8b8e44ffb6d490a5e0b6d9c
- SHA1
  
  39d63c0f4dc48a5cd12f27da8c551adabc6f5cfa
- SHA256
  
  cb353ec2f0152780ed8cc68d0ddbbba1ffb14bf281f0e4dd6773e57d54487559
- SHA512
  
  d5fe949a99daa1e0feb3de476a79bf5a32feff4cae21009842ff5a949986cf2732827abda507be36d2fb7722a808fb2de32c7cffb39674adff9355a5a62aae53
- SSDEEP
  
  12288:qRFoQmXGnfb9rbpRQss0DaEufyDCMOU6n9T8fnJnk2uc6zqhJsgII1mkE3WDxR4k:qHfPOwWBfyDCzU6wrunaJs1pywtKnCm
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2