4590a459b1a27893f71b7e9b6b30e2b340b08eb3598f7aaa3177e4e68791b16b | Triage

Sharing

General

Target

ee69deca0456b2a6cc52e9d3621f6149_JaffaCakes118
Size

382KB
Sample

240920-ztmgdsxfrd
MD5

ee69deca0456b2a6cc52e9d3621f6149
SHA1

d65d66387464bc9fa192948c12bc87c669b9e71f
SHA256

4590a459b1a27893f71b7e9b6b30e2b340b08eb3598f7aaa3177e4e68791b16b
SHA512

d50443149aea5c297f00bc2df628b466b04b47a379c5b1e5ab41b6790be4c91c2bc9223ce7975556b1a1df4dd93839d5d802a86362d93133f65da2210bf2227f
SSDEEP

6144:4dvWQRMDrPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnMqa:QvzRM/CRn/Tq2K7R100E++l4qh/qabGM

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  ee69deca0456b2a6cc52e9d3621f6149_JaffaCakes118
- Size
  
  382KB
- MD5
  
  ee69deca0456b2a6cc52e9d3621f6149
- SHA1
  
  d65d66387464bc9fa192948c12bc87c669b9e71f
- SHA256
  
  4590a459b1a27893f71b7e9b6b30e2b340b08eb3598f7aaa3177e4e68791b16b
- SHA512
  
  d50443149aea5c297f00bc2df628b466b04b47a379c5b1e5ab41b6790be4c91c2bc9223ce7975556b1a1df4dd93839d5d802a86362d93133f65da2210bf2227f
- SSDEEP
  
  6144:4dvWQRMDrPanRgkr/TbWz6b+vzR1vED0sj+SBl4qA4/qylPzgNbwjZUE79rlnMqa:QvzRM/CRn/Tq2K7R100E++l4qh/qabGM
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2