693283295e81ec46c879a07ff1b43a788f33b14e9eca72baa137e394fb3f5435 | Triage

Sharing

General

Target

fdc02b8898c110eb2c528389136a3066_JaffaCakes118
Size

874KB
Sample

240929-ehb63ayfrr
MD5

fdc02b8898c110eb2c528389136a3066
SHA1

178208256d79003593ed333d63db25535b72d9b4
SHA256

693283295e81ec46c879a07ff1b43a788f33b14e9eca72baa137e394fb3f5435
SHA512

aa544b3a31362a34dbab1adeae4736ec97ed4371081aa756c6b275b7d70b5cd675af122ead5c4531cc26c3d32423ace53a603f72e91ccbf3a67b6d620f1fb9f7
SSDEEP

24576:rNEWKYiO4q5FRVI4EWGkYeWhCyFL/soAaqk:JEW55FRVdwk9uLJwk

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  fdc02b8898c110eb2c528389136a3066_JaffaCakes118
- Size
  
  874KB
- MD5
  
  fdc02b8898c110eb2c528389136a3066
- SHA1
  
  178208256d79003593ed333d63db25535b72d9b4
- SHA256
  
  693283295e81ec46c879a07ff1b43a788f33b14e9eca72baa137e394fb3f5435
- SHA512
  
  aa544b3a31362a34dbab1adeae4736ec97ed4371081aa756c6b275b7d70b5cd675af122ead5c4531cc26c3d32423ace53a603f72e91ccbf3a67b6d620f1fb9f7
- SSDEEP
  
  24576:rNEWKYiO4q5FRVI4EWGkYeWhCyFL/soAaqk:JEW55FRVdwk9uLJwk
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2