a0f7b9bde7cd4d51f5c53358a7472fb02a06beafec41747e22d0ae4a48a8f327 | Triage

Sharing

General

Target

ee87a0dadd178e77d3c282436ded4b2b_JaffaCakes118
Size

268KB
Sample

240920-161p8a1fkn
MD5

ee87a0dadd178e77d3c282436ded4b2b
SHA1

06e39265a370e36e9af5a9ee5006642a6dfe3265
SHA256

a0f7b9bde7cd4d51f5c53358a7472fb02a06beafec41747e22d0ae4a48a8f327
SHA512

5eebb63fdd126d9f3342c270e27db24df5a2d8a2950594079b251be489978dfd721edecaf31e9fe689f8361cacd1b212cc5d9ead509083796d480b41c5d6b3b5
SSDEEP

1536:f6MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJujb3K+Z1Pa:fdX0e1FB/DpKjCLHfb3XMbh

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ee87a0dadd178e77d3c282436ded4b2b_JaffaCakes118
- Size
  
  268KB
- MD5
  
  ee87a0dadd178e77d3c282436ded4b2b
- SHA1
  
  06e39265a370e36e9af5a9ee5006642a6dfe3265
- SHA256
  
  a0f7b9bde7cd4d51f5c53358a7472fb02a06beafec41747e22d0ae4a48a8f327
- SHA512
  
  5eebb63fdd126d9f3342c270e27db24df5a2d8a2950594079b251be489978dfd721edecaf31e9fe689f8361cacd1b212cc5d9ead509083796d480b41c5d6b3b5
- SSDEEP
  
  1536:f6MJ249icel/Z01/NBX4UDpegM3zwACUJGLq42GrElP2T/1oHd5RVJujb3K+Z1Pa:fdX0e1FB/DpKjCLHfb3XMbh
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan