4cb07c560974a61363358627bae7422e1bd296c0a3e377784764143ce9addcc8 | Triage

Sharing

General

Target

ec888ccbdacfcbbaefb917a4ff52d85a_JaffaCakes118
Size

384KB
Sample

240920-behyna1dmj
MD5

ec888ccbdacfcbbaefb917a4ff52d85a
SHA1

4925fc5dd148c51a46efd669a11107d163287b50
SHA256

4cb07c560974a61363358627bae7422e1bd296c0a3e377784764143ce9addcc8
SHA512

a5734c5f4b920706573cc560c0e9537d43905db6c72731b5e0454d543bccb674020bba8a8a65f7790f43f13c50dd86abce687d3bcc4c27dd3d003273f8391a13
SSDEEP

6144:oT7MUmcjyATPV7kY4bRgOJEaeim3mmGgq24r+2OlJhfJxXngDxMe:oTQUh5kb1gOJElimj/q/rk9neK

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ec888ccbdacfcbbaefb917a4ff52d85a_JaffaCakes118
- Size
  
  384KB
- MD5
  
  ec888ccbdacfcbbaefb917a4ff52d85a
- SHA1
  
  4925fc5dd148c51a46efd669a11107d163287b50
- SHA256
  
  4cb07c560974a61363358627bae7422e1bd296c0a3e377784764143ce9addcc8
- SHA512
  
  a5734c5f4b920706573cc560c0e9537d43905db6c72731b5e0454d543bccb674020bba8a8a65f7790f43f13c50dd86abce687d3bcc4c27dd3d003273f8391a13
- SSDEEP
  
  6144:oT7MUmcjyATPV7kY4bRgOJEaeim3mmGgq24r+2OlJhfJxXngDxMe:oTQUh5kb1gOJElimj/q/rk9neK
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2