b6672a03ee47e72df4124494ff670f0c5e47abc18f1882abc448f09b4e7c0811 | Triage

Sharing

General

Target

0f966ed11be779857782cef01dc3aa9c_JaffaCakes118
Size

836KB
Sample

241003-ttxdpsyaqb
MD5

0f966ed11be779857782cef01dc3aa9c
SHA1

4b857f37854f164d4ac47939e0d9791a0a444ed2
SHA256

b6672a03ee47e72df4124494ff670f0c5e47abc18f1882abc448f09b4e7c0811
SHA512

123da529d67e170f1889c09a08aedbd3fbe2c31b230c97e20619a6a6568caaf60c78dc921e7b26e935ee51f9c926ac760df33ae382b975758cd6d95b03b83a7b
SSDEEP

24576:seYx9MAXX+Zy4YYycSJoAgnLvjHKr8pgRB:sbeAn2YYn/nLrPaB

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  0f966ed11be779857782cef01dc3aa9c_JaffaCakes118
- Size
  
  836KB
- MD5
  
  0f966ed11be779857782cef01dc3aa9c
- SHA1
  
  4b857f37854f164d4ac47939e0d9791a0a444ed2
- SHA256
  
  b6672a03ee47e72df4124494ff670f0c5e47abc18f1882abc448f09b4e7c0811
- SHA512
  
  123da529d67e170f1889c09a08aedbd3fbe2c31b230c97e20619a6a6568caaf60c78dc921e7b26e935ee51f9c926ac760df33ae382b975758cd6d95b03b83a7b
- SSDEEP
  
  24576:seYx9MAXX+Zy4YYycSJoAgnLvjHKr8pgRB:sbeAn2YYn/nLrPaB
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan