b33da2f29b197a3324950268976f9844a945f51e06b888a48df5b32a32035dbb | Triage

Sharing

General

Target

eeecd79d1ae73bcdd466af090214900f_JaffaCakes118
Size

104KB
Sample

240921-c692ws1gkj
MD5

eeecd79d1ae73bcdd466af090214900f
SHA1

d369f6ca52da53833e0cdfb48a09a725849bbd25
SHA256

b33da2f29b197a3324950268976f9844a945f51e06b888a48df5b32a32035dbb
SHA512

9ace3eb68bf0077edda15f923c146a4eaccaf8c30913d3f90c9acf6fc2e6b5d2387d92b91612029ca2f4e7f2707b6ec5bfbabe77cfc5e4b9dcec0893cde17724
SSDEEP

1536:WCc/MpmtGB0BfHJ/TLTUV96iJ3uA9NCF:WCGMpmtGB0B/NUV96iJ3uACF

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  eeecd79d1ae73bcdd466af090214900f_JaffaCakes118
- Size
  
  104KB
- MD5
  
  eeecd79d1ae73bcdd466af090214900f
- SHA1
  
  d369f6ca52da53833e0cdfb48a09a725849bbd25
- SHA256
  
  b33da2f29b197a3324950268976f9844a945f51e06b888a48df5b32a32035dbb
- SHA512
  
  9ace3eb68bf0077edda15f923c146a4eaccaf8c30913d3f90c9acf6fc2e6b5d2387d92b91612029ca2f4e7f2707b6ec5bfbabe77cfc5e4b9dcec0893cde17724
- SSDEEP
  
  1536:WCc/MpmtGB0BfHJ/TLTUV96iJ3uA9NCF:WCGMpmtGB0B/NUV96iJ3uACF
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2