78251e4fbebe360fd94933687735180a0945b1711f492402580c1988819c641c | Triage

Sharing

General

Target

293c8eaddf84334c0d2eb45a2242c9e8_JaffaCakes118
Size

155KB
Sample

241009-czwkxsvdjn
MD5

293c8eaddf84334c0d2eb45a2242c9e8
SHA1

1fb5e591b7dd2d7fccbca6e8867a2eace822fa17
SHA256

78251e4fbebe360fd94933687735180a0945b1711f492402580c1988819c641c
SHA512

50502f77d719880b01239463095e14089c8f0eb6d22788f92e334392c58ed855800f1bd0f53f06709d71af43d4616dca3423ad0e405d90519ef04a80655f008f
SSDEEP

3072:prVOj8khZB2mfIHHZ/Bq57A3ImfDp+AlJMfFv4maUdxqf:RIYkhf2kxA3Im9uRNNqf

Score

10^/10

adware discovery evasion stealer trojan upx

Malware Config

Targets

- Target
  
  293c8eaddf84334c0d2eb45a2242c9e8_JaffaCakes118
- Size
  
  155KB
- MD5
  
  293c8eaddf84334c0d2eb45a2242c9e8
- SHA1
  
  1fb5e591b7dd2d7fccbca6e8867a2eace822fa17
- SHA256
  
  78251e4fbebe360fd94933687735180a0945b1711f492402580c1988819c641c
- SHA512
  
  50502f77d719880b01239463095e14089c8f0eb6d22788f92e334392c58ed855800f1bd0f53f06709d71af43d4616dca3423ad0e405d90519ef04a80655f008f
- SSDEEP
  
  3072:prVOj8khZB2mfIHHZ/Bq57A3ImfDp+AlJMfFv4maUdxqf:RIYkhf2kxA3Im9uRNNqf
Score

10^/10

adware discovery evasion stealer trojan upx
- UAC bypass
  evasion trojan
- Checks whether UAC is enabled
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryevasionstealertrojanupx

behavioral2

adwarediscoveryevasionstealertrojanupx