5e77e4440031220ec64c27ecba3f5ff4ca7081d559e59bfc92771c5d5ac672dc | Triage

Sharing

General

Target

3cea5dc06308eef1ee7a86ad68ff49b2_JaffaCakes118
Size

810KB
Sample

241013-a8nkkazhph
MD5

3cea5dc06308eef1ee7a86ad68ff49b2
SHA1

640ade111c100be9d6450c2b9a3fe0a2a7ad802b
SHA256

5e77e4440031220ec64c27ecba3f5ff4ca7081d559e59bfc92771c5d5ac672dc
SHA512

33c53b04ce4f50decc96fd8e6f9961a4f8b63d12802708a6554ec0aa199f7738cad8a60419e738163397ff6740e507e56b6f1d9b4179b490a1347655bf30cfd9
SSDEEP

24576:StPSLnGnanyJo6Kn3ER6hrMsFwV6XO4S20r:St0nGre6637+UwVCRS5r

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  3cea5dc06308eef1ee7a86ad68ff49b2_JaffaCakes118
- Size
  
  810KB
- MD5
  
  3cea5dc06308eef1ee7a86ad68ff49b2
- SHA1
  
  640ade111c100be9d6450c2b9a3fe0a2a7ad802b
- SHA256
  
  5e77e4440031220ec64c27ecba3f5ff4ca7081d559e59bfc92771c5d5ac672dc
- SHA512
  
  33c53b04ce4f50decc96fd8e6f9961a4f8b63d12802708a6554ec0aa199f7738cad8a60419e738163397ff6740e507e56b6f1d9b4179b490a1347655bf30cfd9
- SSDEEP
  
  24576:StPSLnGnanyJo6Kn3ER6hrMsFwV6XO4S20r:St0nGre6637+UwVCRS5r
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2

discoveryevasionpersistenceprivilege_escalationtrojan