a0c1a35a219d6c853a071db306dfbd72b1741c58dbc6835d1cd7b2a19a15e3e0 | Triage

Sharing

General

Target

eebce631698dbf305899428f1ee75c83_JaffaCakes118
Size

404KB
Sample

240921-avwn1swhqn
MD5

eebce631698dbf305899428f1ee75c83
SHA1

a48c92dfc9ded38dbaca08ad040fc5d3be8efbb0
SHA256

a0c1a35a219d6c853a071db306dfbd72b1741c58dbc6835d1cd7b2a19a15e3e0
SHA512

b393f860d0f8b3c5d3c7f954e80dfa42ab557b2194a82f7b17d68de691ab1fc078723b598cd4f5384202a87678e4087ce702d3ed6de7de2e4a55085ef9e18516
SSDEEP

6144:BomqZInnyprCIpq5BUELGLXUpVs8/QNa5adPboZ/e/mYcLPdx/q/vGcga:BomqZQypXM+VGrQNa81ote/CLPdE/Rg

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  eebce631698dbf305899428f1ee75c83_JaffaCakes118
- Size
  
  404KB
- MD5
  
  eebce631698dbf305899428f1ee75c83
- SHA1
  
  a48c92dfc9ded38dbaca08ad040fc5d3be8efbb0
- SHA256
  
  a0c1a35a219d6c853a071db306dfbd72b1741c58dbc6835d1cd7b2a19a15e3e0
- SHA512
  
  b393f860d0f8b3c5d3c7f954e80dfa42ab557b2194a82f7b17d68de691ab1fc078723b598cd4f5384202a87678e4087ce702d3ed6de7de2e4a55085ef9e18516
- SSDEEP
  
  6144:BomqZInnyprCIpq5BUELGLXUpVs8/QNa5adPboZ/e/mYcLPdx/q/vGcga:BomqZQypXM+VGrQNa81ote/CLPdE/Rg
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2