9f6c02d15a3bbfb9f467c73343832ca9fa0e7c0c3a5c4c8f4c87a2435a2d6916 | Triage

Sharing

General

Target

e0c81744e4ea3410a7abb583bbbf02d2_JaffaCakes118
Size

1.8MB
Sample

240914-w532qsydrr
MD5

e0c81744e4ea3410a7abb583bbbf02d2
SHA1

93df85f2ef96ea46f8f4e6b9064f1b403233c1db
SHA256

9f6c02d15a3bbfb9f467c73343832ca9fa0e7c0c3a5c4c8f4c87a2435a2d6916
SHA512

ded4ae9f04ded64298a8eb0ad77d9683ac185494fbc3b791421e7edc063d8a7f153af342cd09a5dde4456ce7cafc069b8453f5f36970294b656137e314fe4634
SSDEEP

24576:SWxhHS/BqXi8fAnUoIFh7Z+7kEUxgxq0Fy4zqhtUp/MjWzb1TRxmsrMFYAg/b:yWtIaZckvKcgN+htUpMyzZ7cSAc

Score

6^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  e0c81744e4ea3410a7abb583bbbf02d2_JaffaCakes118
- Size
  
  1.8MB
- MD5
  
  e0c81744e4ea3410a7abb583bbbf02d2
- SHA1
  
  93df85f2ef96ea46f8f4e6b9064f1b403233c1db
- SHA256
  
  9f6c02d15a3bbfb9f467c73343832ca9fa0e7c0c3a5c4c8f4c87a2435a2d6916
- SHA512
  
  ded4ae9f04ded64298a8eb0ad77d9683ac185494fbc3b791421e7edc063d8a7f153af342cd09a5dde4456ce7cafc069b8453f5f36970294b656137e314fe4634
- SSDEEP
  
  24576:SWxhHS/BqXi8fAnUoIFh7Z+7kEUxgxq0Fy4zqhtUp/MjWzb1TRxmsrMFYAg/b:yWtIaZckvKcgN+htUpMyzZ7cSAc
Score

6^/10

evasion persistence trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops desktop.ini file(s)
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan