cbb1306357424bb00241691f420ed2fa60ec39f4ff64a3defec7861173f103d6 | Triage

Sharing

General

Target

f0084856560ed4f416d17accaf24f5f0_JaffaCakes118
Size

890KB
Sample

240921-r8wdvaxgkf
MD5

f0084856560ed4f416d17accaf24f5f0
SHA1

a665a3b29ac12228bd4de2b8a8a7b60ba78839d7
SHA256

cbb1306357424bb00241691f420ed2fa60ec39f4ff64a3defec7861173f103d6
SHA512

8b59d592c4f906fc1b6fa012cf76345fc46705dc5fbc07282bf153ed182ebbc36e05cdd354aa793570be96e2f9ba4114b4a9577fe8a85e7a8b7d2888c91f759c
SSDEEP

12288:ZP2AZzbXvb3YsVUSb1dhX+99ZW8CWU2ZdE+14h+OQ2GeaR9ayr06+WKhxCGUwTib:Jz3zZhX+9JCGZdp6UOKR9bx+nAFuX6yi

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  f0084856560ed4f416d17accaf24f5f0_JaffaCakes118
- Size
  
  890KB
- MD5
  
  f0084856560ed4f416d17accaf24f5f0
- SHA1
  
  a665a3b29ac12228bd4de2b8a8a7b60ba78839d7
- SHA256
  
  cbb1306357424bb00241691f420ed2fa60ec39f4ff64a3defec7861173f103d6
- SHA512
  
  8b59d592c4f906fc1b6fa012cf76345fc46705dc5fbc07282bf153ed182ebbc36e05cdd354aa793570be96e2f9ba4114b4a9577fe8a85e7a8b7d2888c91f759c
- SSDEEP
  
  12288:ZP2AZzbXvb3YsVUSb1dhX+99ZW8CWU2ZdE+14h+OQ2GeaR9ayr06+WKhxCGUwTib:Jz3zZhX+9JCGZdp6UOKR9bx+nAFuX6yi
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2