a5522a608aa89f1099469db4c9d8cb7d4374f2c522a83982ef4ede428c03bb88 | Triage

Sharing

General

Target

45192e992528c5258bc4489af4c360b3_JaffaCakes118
Size

875KB
Sample

241015-bk3j9awcrh
MD5

45192e992528c5258bc4489af4c360b3
SHA1

6d04e024ccb25932f3a36916c792d0fa371f0321
SHA256

a5522a608aa89f1099469db4c9d8cb7d4374f2c522a83982ef4ede428c03bb88
SHA512

61b7ca09ad4f6ffa2e85d6588b22a11faa0ae27f077bb1808fe740ba47cb28b08fb55b2537935b0adf8d405ba21f263c56028ebdc9d116c5d3f4e10ddec331b5
SSDEEP

12288:UYXuVnBVWuhsPLIMguUhF7Be+fWBU1JgM0IexqFcr6mxsdoM2IPm+sfjTk:srhA8Ro+YU1JPexpWssdoRI++sfjTk

Score

7^/10

discovery evasion persistence privilege_escalation trojan

Malware Config

Targets

- Target
  
  45192e992528c5258bc4489af4c360b3_JaffaCakes118
- Size
  
  875KB
- MD5
  
  45192e992528c5258bc4489af4c360b3
- SHA1
  
  6d04e024ccb25932f3a36916c792d0fa371f0321
- SHA256
  
  a5522a608aa89f1099469db4c9d8cb7d4374f2c522a83982ef4ede428c03bb88
- SHA512
  
  61b7ca09ad4f6ffa2e85d6588b22a11faa0ae27f077bb1808fe740ba47cb28b08fb55b2537935b0adf8d405ba21f263c56028ebdc9d116c5d3f4e10ddec331b5
- SSDEEP
  
  12288:UYXuVnBVWuhsPLIMguUhF7Be+fWBU1JgM0IexqFcr6mxsdoM2IPm+sfjTk:srhA8Ro+YU1JPexpWssdoRI++sfjTk
Score

7^/10

discovery evasion persistence privilege_escalation trojan
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistenceprivilege_escalationtrojan

behavioral2