d6064d1b8877398e7aed905e5a2dd98aa521c51c556c92782ae96ffa9f448787 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

043401d04eadf835cfbf5f4a6194fbdb_JaffaCakes118
Size

474KB
Sample

241001-dz36fayaqp
MD5

043401d04eadf835cfbf5f4a6194fbdb
SHA1

ff52882bf898d90577d90fe24ab8f08224874388
SHA256

d6064d1b8877398e7aed905e5a2dd98aa521c51c556c92782ae96ffa9f448787
SHA512

7ac6473a21991c2e84ae1f7ce8dbc6e1b1b798bb60ad4d0c592b8298b53cb0596c152b111f35922ccb4094d881758b51e5f4b4101e7f42563e06d40dcf6b148c
SSDEEP

12288:bNz2aiIH/tpvw2x082V0u48Gmb7xfrCdoegFnOVEzHL:B6aiIlDx0DzGmb7xzCC7nOVor

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  043401d04eadf835cfbf5f4a6194fbdb_JaffaCakes118
- Size
  
  474KB
- MD5
  
  043401d04eadf835cfbf5f4a6194fbdb
- SHA1
  
  ff52882bf898d90577d90fe24ab8f08224874388
- SHA256
  
  d6064d1b8877398e7aed905e5a2dd98aa521c51c556c92782ae96ffa9f448787
- SHA512
  
  7ac6473a21991c2e84ae1f7ce8dbc6e1b1b798bb60ad4d0c592b8298b53cb0596c152b111f35922ccb4094d881758b51e5f4b4101e7f42563e06d40dcf6b148c
- SSDEEP
  
  12288:bNz2aiIH/tpvw2x082V0u48Gmb7xfrCdoegFnOVEzHL:B6aiIlDx0DzGmb7xzCC7nOVor
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2