03f3e7bd1f1be326b9ad9818911be79ec0e10f84e92b81a76e1c655f35ef6410 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

135603faa7ceead4cfcde878f3882990_JaffaCakes118
Size

496KB
Sample

241004-phdd8stcpn
MD5

135603faa7ceead4cfcde878f3882990
SHA1

0530e354eeda05ddb9eb8878fd0bce6d2c4900a7
SHA256

03f3e7bd1f1be326b9ad9818911be79ec0e10f84e92b81a76e1c655f35ef6410
SHA512

0d3603c96fe888766fbbf20f6203aeed5277156e40e093bbb27b12074fec397df89ba22cf003bff1d4bee2259d27dc906d3b51cd01dd2f4346d93ea3feddacb6
SSDEEP

12288:CpnlFG4sGv7j6RqLOLunx1sI9nnRkMu+cXaj63NW892VGD8iZ:c+GNRx6anRkMn2VA89C080

Score

10^/10

discovery evasion persistence trojan

Malware Config

Targets

- Target
  
  135603faa7ceead4cfcde878f3882990_JaffaCakes118
- Size
  
  496KB
- MD5
  
  135603faa7ceead4cfcde878f3882990
- SHA1
  
  0530e354eeda05ddb9eb8878fd0bce6d2c4900a7
- SHA256
  
  03f3e7bd1f1be326b9ad9818911be79ec0e10f84e92b81a76e1c655f35ef6410
- SHA512
  
  0d3603c96fe888766fbbf20f6203aeed5277156e40e093bbb27b12074fec397df89ba22cf003bff1d4bee2259d27dc906d3b51cd01dd2f4346d93ea3feddacb6
- SSDEEP
  
  12288:CpnlFG4sGv7j6RqLOLunx1sI9nnRkMu+cXaj63NW892VGD8iZ:c+GNRx6anRkMn2VA89C080
Score

10^/10

discovery evasion persistence trojan
- UAC bypass
  evasion trojan
- Windows security bypass
  evasion trojan
- Disables taskbar notifications via registry modification
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistencetrojan

behavioral2

discoveryevasionpersistencetrojan