b374698dd5c092152aff4dd4875efb516ce1ab87157fdad9385ab2ddbb0ce5ed | Triage

Sharing

General

Target

eba6ced9be9e1e1c508aeaacf6f35554_JaffaCakes118
Size

448KB
Sample

240919-s4c75swekb
MD5

eba6ced9be9e1e1c508aeaacf6f35554
SHA1

2ee0b11e3cb33a10bfe5245bb5251a15e0a10743
SHA256

b374698dd5c092152aff4dd4875efb516ce1ab87157fdad9385ab2ddbb0ce5ed
SHA512

0af81bd4ab2eb0491327c3295775f886f9586c0cba60ada7214a680d701f9a31c6562cf48d7b3a2fd250e9bf7d534bb6cb5af65ffbc9283e036a16642849ca71
SSDEEP

12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vb:5GpblAB8RLBU+nT74cDzDqc5b

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  eba6ced9be9e1e1c508aeaacf6f35554_JaffaCakes118
- Size
  
  448KB
- MD5
  
  eba6ced9be9e1e1c508aeaacf6f35554
- SHA1
  
  2ee0b11e3cb33a10bfe5245bb5251a15e0a10743
- SHA256
  
  b374698dd5c092152aff4dd4875efb516ce1ab87157fdad9385ab2ddbb0ce5ed
- SHA512
  
  0af81bd4ab2eb0491327c3295775f886f9586c0cba60ada7214a680d701f9a31c6562cf48d7b3a2fd250e9bf7d534bb6cb5af65ffbc9283e036a16642849ca71
- SSDEEP
  
  12288:PBGpbBfAB8RvDB4N+nT74cWgr/x3jDqc7Vb:5GpblAB8RLBU+nT74cDzDqc5b
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2