edc91c3742474b58df072eb54c45fc7a54ad9a277cd0dc6aff5aed52b8933aa0 | Triage

Sharing

General

Target

fc2caa54fbaecdb54e1ed18676257502_JaffaCakes118
Size

870KB
Sample

240928-m9bnlssenm
MD5

fc2caa54fbaecdb54e1ed18676257502
SHA1

91a0c6a58dab3d5f947892e1300b637039c79db7
SHA256

edc91c3742474b58df072eb54c45fc7a54ad9a277cd0dc6aff5aed52b8933aa0
SHA512

9b805ab6a2316743a75eafafaab8c86dbbc0c340b3d094bd224650b4d05e6e832ab0ae706ac50638f546af74e7dd541ce913e2c66c7ea2b745f84f279230bea2
SSDEEP

24576:pyx4OMb6pLTMQs4e7j1cOk2xujJ/qv7r5ZxlCjCnnxcW0t3ua:pyx4OMb6pLwQsL7j1ThM9/eHxlkua

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  fc2caa54fbaecdb54e1ed18676257502_JaffaCakes118
- Size
  
  870KB
- MD5
  
  fc2caa54fbaecdb54e1ed18676257502
- SHA1
  
  91a0c6a58dab3d5f947892e1300b637039c79db7
- SHA256
  
  edc91c3742474b58df072eb54c45fc7a54ad9a277cd0dc6aff5aed52b8933aa0
- SHA512
  
  9b805ab6a2316743a75eafafaab8c86dbbc0c340b3d094bd224650b4d05e6e832ab0ae706ac50638f546af74e7dd541ce913e2c66c7ea2b745f84f279230bea2
- SSDEEP
  
  24576:pyx4OMb6pLTMQs4e7j1cOk2xujJ/qv7r5ZxlCjCnnxcW0t3ua:pyx4OMb6pLwQsL7j1ThM9/eHxlkua
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2