7fa70d4d92e0a1692312b20c953eea40915b472c4a5721ebc17580d7ceb63636 | Triage

Sharing

General

Target

155a3f817a855d264596eff430ecd27c_JaffaCakes118
Size

357KB
Sample

241004-3sraqsshrn
MD5

155a3f817a855d264596eff430ecd27c
SHA1

fe70f202d40cf805227887561eb848729f7aaa5c
SHA256

7fa70d4d92e0a1692312b20c953eea40915b472c4a5721ebc17580d7ceb63636
SHA512

c649a876aeee77389684ea6b46b997e35801cd398507932c17d05b275941e4276bd76f377bf66ca628ff3e032341f4a1a8a305128b853e6a4dd853e13e238da2
SSDEEP

6144:Lmbm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNz98t:LBMAxQ1bH8azq0SFNzGt

Score

10^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  155a3f817a855d264596eff430ecd27c_JaffaCakes118
- Size
  
  357KB
- MD5
  
  155a3f817a855d264596eff430ecd27c
- SHA1
  
  fe70f202d40cf805227887561eb848729f7aaa5c
- SHA256
  
  7fa70d4d92e0a1692312b20c953eea40915b472c4a5721ebc17580d7ceb63636
- SHA512
  
  c649a876aeee77389684ea6b46b997e35801cd398507932c17d05b275941e4276bd76f377bf66ca628ff3e032341f4a1a8a305128b853e6a4dd853e13e238da2
- SSDEEP
  
  6144:Lmbm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNz98t:LBMAxQ1bH8azq0SFNzGt
Score

10^/10

discovery evasion trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2