e251f13fa4fc3c99449e1e4f60a4bee1ef5d4508684600ccc42bbeb09fe1989d | Triage

Sharing

General

Target

42355f7cc26391aaad6e7616ae3dba57_JaffaCakes118
Size

863KB
Sample

241013-1g6vyazeke
MD5

42355f7cc26391aaad6e7616ae3dba57
SHA1

c0ebed4556b79df77b7c4f9b74ed9c6f8cc232fe
SHA256

e251f13fa4fc3c99449e1e4f60a4bee1ef5d4508684600ccc42bbeb09fe1989d
SHA512

ee9fb7235abff62a85cc68bd3882b083e6cd3a143d3c2813d37add536f625518818a1f7074e6c13cf0892ffdcfbb556639b033c5f793e34f53cfdbfa25e1f25e
SSDEEP

12288:V7fc4Z0G50HsCKlxTekoI0xkZSYDajEQxva2dS2lTekh9aCWhS8NTnk8j:VAK/MIOkvKva2d1WWQk8j

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  42355f7cc26391aaad6e7616ae3dba57_JaffaCakes118
- Size
  
  863KB
- MD5
  
  42355f7cc26391aaad6e7616ae3dba57
- SHA1
  
  c0ebed4556b79df77b7c4f9b74ed9c6f8cc232fe
- SHA256
  
  e251f13fa4fc3c99449e1e4f60a4bee1ef5d4508684600ccc42bbeb09fe1989d
- SHA512
  
  ee9fb7235abff62a85cc68bd3882b083e6cd3a143d3c2813d37add536f625518818a1f7074e6c13cf0892ffdcfbb556639b033c5f793e34f53cfdbfa25e1f25e
- SSDEEP
  
  12288:V7fc4Z0G50HsCKlxTekoI0xkZSYDajEQxva2dS2lTekh9aCWhS8NTnk8j:VAK/MIOkvKva2d1WWQk8j
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan