59d0e52b428beec5ea42ee6afcf4dc35c0653c7b2528c96bc9cdc67d81067fc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2592487214069d99ecbfcf1eec4057eb_JaffaCakes118
Size

825KB
Sample

241008-z4j41sxcrr
MD5

2592487214069d99ecbfcf1eec4057eb
SHA1

dff74621e59fc77590df960819f099c608ea7cf8
SHA256

59d0e52b428beec5ea42ee6afcf4dc35c0653c7b2528c96bc9cdc67d81067fc4
SHA512

ce81ed5b7c818b0e02bdef987fc81c7bb1d55b811321f310f499a5fd9ee3ab75822f4585bf63b3efde40e6c6d51f3d813c28b8ef08ba70cf799e3c9efaea5ef9
SSDEEP

24576:SmbsNEPRtBTGTI1uSpGCNNUnF3pdRNILf:SmQNEXVb17IQNURpF+f

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  2592487214069d99ecbfcf1eec4057eb_JaffaCakes118
- Size
  
  825KB
- MD5
  
  2592487214069d99ecbfcf1eec4057eb
- SHA1
  
  dff74621e59fc77590df960819f099c608ea7cf8
- SHA256
  
  59d0e52b428beec5ea42ee6afcf4dc35c0653c7b2528c96bc9cdc67d81067fc4
- SHA512
  
  ce81ed5b7c818b0e02bdef987fc81c7bb1d55b811321f310f499a5fd9ee3ab75822f4585bf63b3efde40e6c6d51f3d813c28b8ef08ba70cf799e3c9efaea5ef9
- SSDEEP
  
  24576:SmbsNEPRtBTGTI1uSpGCNNUnF3pdRNILf:SmQNEXVb17IQNURpF+f
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan