88dfa50355fd05d440dfc217065dd7d298b994b0e1cc7e737d6d36530ad50ff2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

df9bf48fd5a564a98f24a073088853a6_JaffaCakes118
Size

367KB
Sample

240914-gmlbmszanm
MD5

df9bf48fd5a564a98f24a073088853a6
SHA1

e213aa2540f7eba27474cafe2dd66c166d517988
SHA256

88dfa50355fd05d440dfc217065dd7d298b994b0e1cc7e737d6d36530ad50ff2
SHA512

0941373485e00481caafdb15939403aa1ac54d33463a2e20235946bc44bd392f5271e9ca60c0c2f5acc49e39f7cc16a6949aaffce6e6a829ab5a28c921a3eb5b
SSDEEP

6144:qRMNhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:qRMzrpDneFNzino7IUHybPzQjUeX

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  df9bf48fd5a564a98f24a073088853a6_JaffaCakes118
- Size
  
  367KB
- MD5
  
  df9bf48fd5a564a98f24a073088853a6
- SHA1
  
  e213aa2540f7eba27474cafe2dd66c166d517988
- SHA256
  
  88dfa50355fd05d440dfc217065dd7d298b994b0e1cc7e737d6d36530ad50ff2
- SHA512
  
  0941373485e00481caafdb15939403aa1ac54d33463a2e20235946bc44bd392f5271e9ca60c0c2f5acc49e39f7cc16a6949aaffce6e6a829ab5a28c921a3eb5b
- SSDEEP
  
  6144:qRMNhrVf/DRauRHlwrFYaN5ino7241GtMqzIXPH8CV+mybPzKP3zUeXm9+r:qRMzrpDneFNzino7IUHybPzQjUeX
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2