045a86d27879060e5b32edcc2474d88332eb191e2e06e312b3700bfb12229fb0 | Triage

Sharing

General

Target

4429ba131d4240162d6516842911ef39_JaffaCakes118
Size

480KB
Sample

241014-ztcbeszfpp
MD5

4429ba131d4240162d6516842911ef39
SHA1

87994cc3cbc5a3ef0188f6e1a9c37586892388ef
SHA256

045a86d27879060e5b32edcc2474d88332eb191e2e06e312b3700bfb12229fb0
SHA512

f39a2e8c995f2039d4abaa6929c8884da908b4852a49bac79b970749eb7c11899b960ab2f77352ea0042d08d7d0800f591af90682bcc3865162d1dc0e8804cba
SSDEEP

12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  4429ba131d4240162d6516842911ef39_JaffaCakes118
- Size
  
  480KB
- MD5
  
  4429ba131d4240162d6516842911ef39
- SHA1
  
  87994cc3cbc5a3ef0188f6e1a9c37586892388ef
- SHA256
  
  045a86d27879060e5b32edcc2474d88332eb191e2e06e312b3700bfb12229fb0
- SHA512
  
  f39a2e8c995f2039d4abaa6929c8884da908b4852a49bac79b970749eb7c11899b960ab2f77352ea0042d08d7d0800f591af90682bcc3865162d1dc0e8804cba
- SSDEEP
  
  12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan