decfa900ce14d532b730a9070d71114e02aa6a0b8d405c9577fd593f42af330b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f726cc5fa1db3923a62100c640deb50c_JaffaCakes118
Size

660KB
Sample

240926-anfdfswcpr
MD5

f726cc5fa1db3923a62100c640deb50c
SHA1

fda41431db89c3e29efddfa2a5427de7cdc83133
SHA256

decfa900ce14d532b730a9070d71114e02aa6a0b8d405c9577fd593f42af330b
SHA512

e6f6345845ec0b6911a45790e26f2b755ed3c9f6b05fe1426f94a579594c3b241d44b5d9daf49f8160ddb6d18efbd915451990b5712f7df2cca3dca99d267ebc
SSDEEP

3072:8wVxOo4uDRiOEWfatBF/xJlxtZcVII1GmWhW72a7kyO64pTSod16naj:8wV+1BFjPtuVIXmWCnPKSodgQ

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  f726cc5fa1db3923a62100c640deb50c_JaffaCakes118
- Size
  
  660KB
- MD5
  
  f726cc5fa1db3923a62100c640deb50c
- SHA1
  
  fda41431db89c3e29efddfa2a5427de7cdc83133
- SHA256
  
  decfa900ce14d532b730a9070d71114e02aa6a0b8d405c9577fd593f42af330b
- SHA512
  
  e6f6345845ec0b6911a45790e26f2b755ed3c9f6b05fe1426f94a579594c3b241d44b5d9daf49f8160ddb6d18efbd915451990b5712f7df2cca3dca99d267ebc
- SSDEEP
  
  3072:8wVxOo4uDRiOEWfatBF/xJlxtZcVII1GmWhW72a7kyO64pTSod16naj:8wV+1BFjPtuVIXmWCnPKSodgQ
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan