65dccc4c28bffcc1e32895e23451dd57fbf6fc3936524ab504f900e665050abf | Triage

Sharing

General

Target

e9eea321d684f8f96e270021936180f2_JaffaCakes118
Size

812KB
Sample

240918-zfzvkasgqr
MD5

e9eea321d684f8f96e270021936180f2
SHA1

9980c1f33b07993af9599b1ba9192a5de6826c6e
SHA256

65dccc4c28bffcc1e32895e23451dd57fbf6fc3936524ab504f900e665050abf
SHA512

fe36137a493b5d5d3ca086f6f861eeac8ab95f2d93fb927b6ae67fb0a120982ca459c34fbe12eb54e2eb98fc40cc6af8234a92dc63cd489e101761689fe6dbfb
SSDEEP

24576:08p80mxwhVslIR115luYzwjwvtY+kOIH4/2wN:0t0mx/IRn5lSUBkOG4/RN

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  e9eea321d684f8f96e270021936180f2_JaffaCakes118
- Size
  
  812KB
- MD5
  
  e9eea321d684f8f96e270021936180f2
- SHA1
  
  9980c1f33b07993af9599b1ba9192a5de6826c6e
- SHA256
  
  65dccc4c28bffcc1e32895e23451dd57fbf6fc3936524ab504f900e665050abf
- SHA512
  
  fe36137a493b5d5d3ca086f6f861eeac8ab95f2d93fb927b6ae67fb0a120982ca459c34fbe12eb54e2eb98fc40cc6af8234a92dc63cd489e101761689fe6dbfb
- SSDEEP
  
  24576:08p80mxwhVslIR115luYzwjwvtY+kOIH4/2wN:0t0mx/IRn5lSUBkOG4/RN
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan