dfa2dbd525a30358ffe37aae6a1be05640ef48525490bfe12ffc91b5cd2b68f9 | Triage

Sharing

General

Target

01e7e30330b750ccefd8b370a59aeef4_JaffaCakes118
Size

372KB
Sample

240930-r71l6svepg
MD5

01e7e30330b750ccefd8b370a59aeef4
SHA1

3cc5cd94d521fc8133884b79c117e6fab3d5784b
SHA256

dfa2dbd525a30358ffe37aae6a1be05640ef48525490bfe12ffc91b5cd2b68f9
SHA512

431dec6ef9b118886abec41e2a9aaeb0fc7eaeab441487585d1098f53e47cae9516eb2d5cfc5307b2054441189f020f908eeb36ff58a610dd3eeab20e2684689
SSDEEP

6144:XgjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:YvjVkCrSvoZNyl5fwD

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  01e7e30330b750ccefd8b370a59aeef4_JaffaCakes118
- Size
  
  372KB
- MD5
  
  01e7e30330b750ccefd8b370a59aeef4
- SHA1
  
  3cc5cd94d521fc8133884b79c117e6fab3d5784b
- SHA256
  
  dfa2dbd525a30358ffe37aae6a1be05640ef48525490bfe12ffc91b5cd2b68f9
- SHA512
  
  431dec6ef9b118886abec41e2a9aaeb0fc7eaeab441487585d1098f53e47cae9516eb2d5cfc5307b2054441189f020f908eeb36ff58a610dd3eeab20e2684689
- SSDEEP
  
  6144:XgjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:YvjVkCrSvoZNyl5fwD
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2