506f4eda6582fddb8b0d21489f32477ae58aa56cb406ae4953ab2a698e62ae26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f542606605fb369f92754d5bc9ead103_JaffaCakes118
Size

468KB
Sample

240925-ft93xaxanq
MD5

f542606605fb369f92754d5bc9ead103
SHA1

c78018ae5a2c5c07e570c39b65065c1cbefd3a98
SHA256

506f4eda6582fddb8b0d21489f32477ae58aa56cb406ae4953ab2a698e62ae26
SHA512

e8196f9ae0f678bce5c5c016b41bdc4cab63e4aa27f4de4fc8138ea8c592471d2ef30afb6912232a1cfe9bf13e0d0791bfdb14a34d260485e46002b0ab82ac2d
SSDEEP

12288:33gNUdRviVOaceuiPWHR3VhKvKHtvzKL3Yz:33gNUrviVOrejKRSE27Yz

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  f542606605fb369f92754d5bc9ead103_JaffaCakes118
- Size
  
  468KB
- MD5
  
  f542606605fb369f92754d5bc9ead103
- SHA1
  
  c78018ae5a2c5c07e570c39b65065c1cbefd3a98
- SHA256
  
  506f4eda6582fddb8b0d21489f32477ae58aa56cb406ae4953ab2a698e62ae26
- SHA512
  
  e8196f9ae0f678bce5c5c016b41bdc4cab63e4aa27f4de4fc8138ea8c592471d2ef30afb6912232a1cfe9bf13e0d0791bfdb14a34d260485e46002b0ab82ac2d
- SSDEEP
  
  12288:33gNUdRviVOaceuiPWHR3VhKvKHtvzKL3Yz:33gNUrviVOrejKRSE27Yz
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan