0996966278e9555834e6fa156cea27927989f65a18d40887cde5f9b60439d856 | Triage

Sharing

General

Target

db7ce1977db414f16d060a0ed67ddea6_JaffaCakes118
Size

804KB
Sample

240912-aqa7hs1fjn
MD5

db7ce1977db414f16d060a0ed67ddea6
SHA1

aa9cd98755a33860889eb9c3c0d2324e7ed656e7
SHA256

0996966278e9555834e6fa156cea27927989f65a18d40887cde5f9b60439d856
SHA512

10be600d840857852b41ce56f5f376b9d70f031fd4f379eabc5c9d0aa8c879e115b72b4113c0b900a32559da63b964be81c63fc8dc528433f051fab4ac29e56a
SSDEEP

24576:0JrW5MfKoomkGBqhKZ5w3djBB9az3Rcvdf3ZgRV:srW5MfbgGrOdoz3RGFJ6V

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  db7ce1977db414f16d060a0ed67ddea6_JaffaCakes118
- Size
  
  804KB
- MD5
  
  db7ce1977db414f16d060a0ed67ddea6
- SHA1
  
  aa9cd98755a33860889eb9c3c0d2324e7ed656e7
- SHA256
  
  0996966278e9555834e6fa156cea27927989f65a18d40887cde5f9b60439d856
- SHA512
  
  10be600d840857852b41ce56f5f376b9d70f031fd4f379eabc5c9d0aa8c879e115b72b4113c0b900a32559da63b964be81c63fc8dc528433f051fab4ac29e56a
- SSDEEP
  
  24576:0JrW5MfKoomkGBqhKZ5w3djBB9az3Rcvdf3ZgRV:srW5MfbgGrOdoz3RGFJ6V
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan