a08ec313e8d09703788ca80a19adc87467c916c40c7c427561d17cda6265a735 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb86f860e12a06001d7fa39386a815ab_JaffaCakes118
Size

882KB
Sample

240928-fcq9gaxfjm
MD5

fb86f860e12a06001d7fa39386a815ab
SHA1

44f5f3ab70defdb199562541329944757d8a2487
SHA256

a08ec313e8d09703788ca80a19adc87467c916c40c7c427561d17cda6265a735
SHA512

5495caa32c6d9101e730d1cd0b850a77dfbab47e4a32b990c76db22884fa9052d0864e9b7b713d7736a8fbca1020fcb564cf98809db0027d291f937cbab8210f
SSDEEP

24576:OiLv5qMNv+jcp3iXBJmL/9bjjdhapGQRloaJ0:Oi1JNQO3ibu5jBhaQQRlok0

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  fb86f860e12a06001d7fa39386a815ab_JaffaCakes118
- Size
  
  882KB
- MD5
  
  fb86f860e12a06001d7fa39386a815ab
- SHA1
  
  44f5f3ab70defdb199562541329944757d8a2487
- SHA256
  
  a08ec313e8d09703788ca80a19adc87467c916c40c7c427561d17cda6265a735
- SHA512
  
  5495caa32c6d9101e730d1cd0b850a77dfbab47e4a32b990c76db22884fa9052d0864e9b7b713d7736a8fbca1020fcb564cf98809db0027d291f937cbab8210f
- SSDEEP
  
  24576:OiLv5qMNv+jcp3iXBJmL/9bjjdhapGQRloaJ0:Oi1JNQO3ibu5jBhaQQRlok0
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2