f609c937f319f9860542267a72080a4d7d3fec7974c620c2c33a4778e0e014d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a8ed5678906bb1ec9f33d84dca38a7a_JaffaCakes118
Size

479KB
Sample

241002-n79nasyfja
MD5

0a8ed5678906bb1ec9f33d84dca38a7a
SHA1

af4215738ea8d3e377442997268cef0b03ce2c1a
SHA256

f609c937f319f9860542267a72080a4d7d3fec7974c620c2c33a4778e0e014d8
SHA512

3395e608827444d4b76056488a32bdc602084f9bff4840d32030e67b9f5afaaec1e04c92c423dfc6f55468df127ab4c03ee08493be55cff53edf9bfcd7a46fe1
SSDEEP

12288:rtOzkjUBvCkfmvz756FGtkeSUknzp7tRuvftbOb8:RwkjUV5a75G0OtXggb8

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  0a8ed5678906bb1ec9f33d84dca38a7a_JaffaCakes118
- Size
  
  479KB
- MD5
  
  0a8ed5678906bb1ec9f33d84dca38a7a
- SHA1
  
  af4215738ea8d3e377442997268cef0b03ce2c1a
- SHA256
  
  f609c937f319f9860542267a72080a4d7d3fec7974c620c2c33a4778e0e014d8
- SHA512
  
  3395e608827444d4b76056488a32bdc602084f9bff4840d32030e67b9f5afaaec1e04c92c423dfc6f55468df127ab4c03ee08493be55cff53edf9bfcd7a46fe1
- SSDEEP
  
  12288:rtOzkjUBvCkfmvz756FGtkeSUknzp7tRuvftbOb8:RwkjUV5a75G0OtXggb8
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan