efc080df21af6c404c159fff3f19c80001335d50611cb373a64a1f411954bf8e | Triage

Sharing

General

Target

06cbec45ff91809571145c063b15c77b_JaffaCakes118
Size

143KB
Sample

241001-wevyfasfln
MD5

06cbec45ff91809571145c063b15c77b
SHA1

3d7e4aff1e432e37f49dd142e921fec48850e0f8
SHA256

efc080df21af6c404c159fff3f19c80001335d50611cb373a64a1f411954bf8e
SHA512

34aaffa1332cacb7827db81c6566590f535ba289ed8c7bf94afbed71b38b5d274426f53fa9478218755779a946b3bba0d2d11b2deafa09773b5301165aa78a58
SSDEEP

3072:iQGpgh863FbKDCy01ix7INTWu16y065yl:iQS+7y01iC465q

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  06cbec45ff91809571145c063b15c77b_JaffaCakes118
- Size
  
  143KB
- MD5
  
  06cbec45ff91809571145c063b15c77b
- SHA1
  
  3d7e4aff1e432e37f49dd142e921fec48850e0f8
- SHA256
  
  efc080df21af6c404c159fff3f19c80001335d50611cb373a64a1f411954bf8e
- SHA512
  
  34aaffa1332cacb7827db81c6566590f535ba289ed8c7bf94afbed71b38b5d274426f53fa9478218755779a946b3bba0d2d11b2deafa09773b5301165aa78a58
- SSDEEP
  
  3072:iQGpgh863FbKDCy01ix7INTWu16y065yl:iQS+7y01iC465q
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan