8f2757260c173e85e17ab04ae77b759c6e4993d2cb24751ef4475b498a88184f | Triage

Sharing

General

Target

edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118
Size

348KB
Sample

240920-ry8les1fnd
MD5

edce03d512f152c3ad2ae77cfa61ac7b
SHA1

81d5db201a8b546441fcdc1460a9948077ac337f
SHA256

8f2757260c173e85e17ab04ae77b759c6e4993d2cb24751ef4475b498a88184f
SHA512

a392b0a131b120b87e706df24ea5ed22a795fac4a7f2606ead7d549b0f35f0b8244ba6445d4e7b7c89165fdf90336b402b0cc66aba68a56d5ea8d3fce59af453
SSDEEP

6144:Qd1EqIaJsMui4VDKAo/HfFfirqkaCWmmG0EW2F2NzZxcogkYxiX3C7P:g+vZ4lqr/3WTG0hJDxcog7UC7

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118
- Size
  
  348KB
- MD5
  
  edce03d512f152c3ad2ae77cfa61ac7b
- SHA1
  
  81d5db201a8b546441fcdc1460a9948077ac337f
- SHA256
  
  8f2757260c173e85e17ab04ae77b759c6e4993d2cb24751ef4475b498a88184f
- SHA512
  
  a392b0a131b120b87e706df24ea5ed22a795fac4a7f2606ead7d549b0f35f0b8244ba6445d4e7b7c89165fdf90336b402b0cc66aba68a56d5ea8d3fce59af453
- SSDEEP
  
  6144:Qd1EqIaJsMui4VDKAo/HfFfirqkaCWmmG0EW2F2NzZxcogkYxiX3C7P:g+vZ4lqr/3WTG0hJDxcog7UC7
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2