0b8344236ec3c1f83f8dd58f08eabb4b3342a807018f638caf0864ee56b27a28 | Triage

Sharing

General

Target

ee45831a5af933c9cd74d8a37bd2a57f_JaffaCakes118
Size

390KB
Sample

240920-x5w4vstekj
MD5

ee45831a5af933c9cd74d8a37bd2a57f
SHA1

c214bb0f652390ebe6fd563b10546f39fb874044
SHA256

0b8344236ec3c1f83f8dd58f08eabb4b3342a807018f638caf0864ee56b27a28
SHA512

e8a2fea7fd875945b0d9f28a2f29fe1ffce74dfa7c8bb1ea69025dfd4a06c9dc6f1b540df35f3bf4e767c55bff1eb90a98e027eab3304f8a8aec28876159f4f8
SSDEEP

6144:sqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:eO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  ee45831a5af933c9cd74d8a37bd2a57f_JaffaCakes118
- Size
  
  390KB
- MD5
  
  ee45831a5af933c9cd74d8a37bd2a57f
- SHA1
  
  c214bb0f652390ebe6fd563b10546f39fb874044
- SHA256
  
  0b8344236ec3c1f83f8dd58f08eabb4b3342a807018f638caf0864ee56b27a28
- SHA512
  
  e8a2fea7fd875945b0d9f28a2f29fe1ffce74dfa7c8bb1ea69025dfd4a06c9dc6f1b540df35f3bf4e767c55bff1eb90a98e027eab3304f8a8aec28876159f4f8
- SSDEEP
  
  6144:sqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:eO1xm+QoK0t4K3gCTDYWGrYzt+NST
Score

10^/10

discovery evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2