18955e99ed4d71935a0813c8c8461163918d7de8e7b227752220cf2033e08c30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa90fdec26782cf2987827dfce515b63_JaffaCakes118
Size

706KB
Sample

240927-rpwv9swgll
MD5

fa90fdec26782cf2987827dfce515b63
SHA1

24c40d4f369a539c62ee0ab4f53cda79528fe64b
SHA256

18955e99ed4d71935a0813c8c8461163918d7de8e7b227752220cf2033e08c30
SHA512

822f10e9bfb0ccf83109d5a546efc6303de8c90e6abf439e035cb7ad67c1ac6ad6987778c24437b5fdbd8d9fe6a73a5ce93f050ac42d3e10a11a3ca9359d2f40
SSDEEP

12288:XPqlDAbt2HGn1dlrRe0eBkjvKghJqmMIAbko7mqneOyi55I7LAh+JQ:XCrHGn1bYlkjv5hJ3MIAbrBnDys5KCn

Score

6^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  fa90fdec26782cf2987827dfce515b63_JaffaCakes118
- Size
  
  706KB
- MD5
  
  fa90fdec26782cf2987827dfce515b63
- SHA1
  
  24c40d4f369a539c62ee0ab4f53cda79528fe64b
- SHA256
  
  18955e99ed4d71935a0813c8c8461163918d7de8e7b227752220cf2033e08c30
- SHA512
  
  822f10e9bfb0ccf83109d5a546efc6303de8c90e6abf439e035cb7ad67c1ac6ad6987778c24437b5fdbd8d9fe6a73a5ce93f050ac42d3e10a11a3ca9359d2f40
- SSDEEP
  
  12288:XPqlDAbt2HGn1dlrRe0eBkjvKghJqmMIAbko7mqneOyi55I7LAh+JQ:XCrHGn1bYlkjv5hJ3MIAbrBnDys5KCn
Score

6^/10

discovery evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan