9bce2e93ecf6039fc9eb8dadc2a999df826eeb42c3e2c90aa7eea91ebd461d6b | Triage

Sharing

General

Target

ee7ec172b89f67c48ac4646bcbb73478_JaffaCakes118
Size

344KB
Sample

240920-1rvknazelb
MD5

ee7ec172b89f67c48ac4646bcbb73478
SHA1

b9a084dd35d9cf39076ba90583d4b0e29ca73173
SHA256

9bce2e93ecf6039fc9eb8dadc2a999df826eeb42c3e2c90aa7eea91ebd461d6b
SHA512

5119c1638c5ffc7bd998038dd3e5d828be238654670380a456f7355691d955ea93a53c2decf2a8fa97df2ab2d240caa068f9f4e4cdadcea85cebfa7511e1cd4c
SSDEEP

6144:rX0rS9spS4FSve+bZEi3hcx/UtmLrxv0ea9nrubUR/RFPUEOX:rErSSoWSveaEgcx7LrVba9n6AaEO

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ee7ec172b89f67c48ac4646bcbb73478_JaffaCakes118
- Size
  
  344KB
- MD5
  
  ee7ec172b89f67c48ac4646bcbb73478
- SHA1
  
  b9a084dd35d9cf39076ba90583d4b0e29ca73173
- SHA256
  
  9bce2e93ecf6039fc9eb8dadc2a999df826eeb42c3e2c90aa7eea91ebd461d6b
- SHA512
  
  5119c1638c5ffc7bd998038dd3e5d828be238654670380a456f7355691d955ea93a53c2decf2a8fa97df2ab2d240caa068f9f4e4cdadcea85cebfa7511e1cd4c
- SSDEEP
  
  6144:rX0rS9spS4FSve+bZEi3hcx/UtmLrxv0ea9nrubUR/RFPUEOX:rErSSoWSveaEgcx7LrVba9n6AaEO
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2