47d45b0e7799121fefda208524c7e951da9f205130dc1c1d84b965672815eee0 | Triage

Sharing

General

Target

d62f9c48311c83304bc8d77eb43d5ae9_JaffaCakes118
Size

914KB
Sample

240909-m6td9avajn
MD5

d62f9c48311c83304bc8d77eb43d5ae9
SHA1

bdbbb8c996f8cd80f64adf4acc800b0305dbed21
SHA256

47d45b0e7799121fefda208524c7e951da9f205130dc1c1d84b965672815eee0
SHA512

aadba65d045c9a448702c005f2252f61202bb9684388eb50472938ca7365f05bc6116d24269a13d32a15b2280b35167a1e4465b766de97ff029c2318d81b9713
SSDEEP

24576:RfshqMUYh/wFGROwY+G64LrCed7WwbcKz7:RaqMUUjRzF2rrB7

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  d62f9c48311c83304bc8d77eb43d5ae9_JaffaCakes118
- Size
  
  914KB
- MD5
  
  d62f9c48311c83304bc8d77eb43d5ae9
- SHA1
  
  bdbbb8c996f8cd80f64adf4acc800b0305dbed21
- SHA256
  
  47d45b0e7799121fefda208524c7e951da9f205130dc1c1d84b965672815eee0
- SHA512
  
  aadba65d045c9a448702c005f2252f61202bb9684388eb50472938ca7365f05bc6116d24269a13d32a15b2280b35167a1e4465b766de97ff029c2318d81b9713
- SSDEEP
  
  24576:RfshqMUYh/wFGROwY+G64LrCed7WwbcKz7:RaqMUUjRzF2rrB7
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2