7ca2d0fa206f1518bbd391cf0e9895c637a96bb617d2cfc5f8afb415899fa723 | Triage

Sharing

General

Target

0844a839a6f55d895eaf2061a6cca3b9_JaffaCakes118
Size

852KB
Sample

241002-byrd5s1akj
MD5

0844a839a6f55d895eaf2061a6cca3b9
SHA1

0a22b50b3e7ca6c695d86ec8447977a449dd2736
SHA256

7ca2d0fa206f1518bbd391cf0e9895c637a96bb617d2cfc5f8afb415899fa723
SHA512

c46f99f72d8d32959bffb2e5b2d228c32e2249541972650f9e89fa120af4790efb3b2d386d3c1c8fecb767c6b423da179eda685efd385c40b1f35452e4308c93
SSDEEP

24576:xJVL0rWEy2QlmzwqZhBXtOBnlAkQp4j5cP:xJl0rW1mzZ3BdOnwP

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  0844a839a6f55d895eaf2061a6cca3b9_JaffaCakes118
- Size
  
  852KB
- MD5
  
  0844a839a6f55d895eaf2061a6cca3b9
- SHA1
  
  0a22b50b3e7ca6c695d86ec8447977a449dd2736
- SHA256
  
  7ca2d0fa206f1518bbd391cf0e9895c637a96bb617d2cfc5f8afb415899fa723
- SHA512
  
  c46f99f72d8d32959bffb2e5b2d228c32e2249541972650f9e89fa120af4790efb3b2d386d3c1c8fecb767c6b423da179eda685efd385c40b1f35452e4308c93
- SSDEEP
  
  24576:xJVL0rWEy2QlmzwqZhBXtOBnlAkQp4j5cP:xJl0rW1mzZ3BdOnwP
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan