64f3be2cd612e774d4885fd256fd20bf42a3b21ee909063fd8ab7ae54c193270 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130dc467973516021190447df25a2f78_JaffaCakes118
Size

479KB
Sample

241004-m1swjazejm
MD5

130dc467973516021190447df25a2f78
SHA1

478af67a620e0e86331e447801b7b588fb9603b5
SHA256

64f3be2cd612e774d4885fd256fd20bf42a3b21ee909063fd8ab7ae54c193270
SHA512

c3207ac692f11c45474042630c3b23d8f8aac51306af288c315c8cba7b1941cfa29201ef149c957622b67d97c28bd18b63f54483fa9e7949e0bf1a7cbd0d15fb
SSDEEP

12288:nHO++IUBvCkfmvz756FGtkeSUknzp7tRuvftbObG:HxzUV5a75G0OtXggbG

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  130dc467973516021190447df25a2f78_JaffaCakes118
- Size
  
  479KB
- MD5
  
  130dc467973516021190447df25a2f78
- SHA1
  
  478af67a620e0e86331e447801b7b588fb9603b5
- SHA256
  
  64f3be2cd612e774d4885fd256fd20bf42a3b21ee909063fd8ab7ae54c193270
- SHA512
  
  c3207ac692f11c45474042630c3b23d8f8aac51306af288c315c8cba7b1941cfa29201ef149c957622b67d97c28bd18b63f54483fa9e7949e0bf1a7cbd0d15fb
- SSDEEP
  
  12288:nHO++IUBvCkfmvz756FGtkeSUknzp7tRuvftbObG:HxzUV5a75G0OtXggbG
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan