35f7718f006dfe50c2e3f2a6961f5758a14ba92619c5c45924cd0d76e1728484 | Triage

Sharing

General

Target

ead0860db98d761db5047d57d69f12a4_JaffaCakes118
Size

365KB
Sample

240919-hwd5cswepd
MD5

ead0860db98d761db5047d57d69f12a4
SHA1

20a6cfe5d007800b2355c854c8256ef5ae015c2e
SHA256

35f7718f006dfe50c2e3f2a6961f5758a14ba92619c5c45924cd0d76e1728484
SHA512

cfd41dd041d49cbf91041129340cadb67cbef5ec8af483dceb6879c5a39c594dc81ea66ef25196406e3e3d5da3c74756f45e5d987de5772fbc7cbb60eccd34c9
SSDEEP

6144:zNzRMca4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:JRM7x4ojf51aTcK0NEQUd0op3QlL

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ead0860db98d761db5047d57d69f12a4_JaffaCakes118
- Size
  
  365KB
- MD5
  
  ead0860db98d761db5047d57d69f12a4
- SHA1
  
  20a6cfe5d007800b2355c854c8256ef5ae015c2e
- SHA256
  
  35f7718f006dfe50c2e3f2a6961f5758a14ba92619c5c45924cd0d76e1728484
- SHA512
  
  cfd41dd041d49cbf91041129340cadb67cbef5ec8af483dceb6879c5a39c594dc81ea66ef25196406e3e3d5da3c74756f45e5d987de5772fbc7cbb60eccd34c9
- SSDEEP
  
  6144:zNzRMca4hib4j8jf51Qx7O6bcLehsEwkoK/6ERdFQJdlMu6lb/01apjbV6m8lL:JRM7x4ojf51aTcK0NEQUd0op3QlL
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2