01eaf5c5e0314f71a0fea5347cbf8c23a530aa3130e4edc411a1de9a70d67435 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53a005bbab087c6db72af2783e68c512_JaffaCakes118
Size

480KB
Sample

241017-zfqxnavfkf
MD5

53a005bbab087c6db72af2783e68c512
SHA1

e2579c3d1752f885189badb7b44c65536a97ac0a
SHA256

01eaf5c5e0314f71a0fea5347cbf8c23a530aa3130e4edc411a1de9a70d67435
SHA512

09a89cbfc89766ae62c44a3c77b481f8f3da68b910faf9dd30eeea0e03449d3e00b830bd2452759d0b743b9925dd0387355fa8007a1acd0ce99aeb29ced80658
SSDEEP

12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  53a005bbab087c6db72af2783e68c512_JaffaCakes118
- Size
  
  480KB
- MD5
  
  53a005bbab087c6db72af2783e68c512
- SHA1
  
  e2579c3d1752f885189badb7b44c65536a97ac0a
- SHA256
  
  01eaf5c5e0314f71a0fea5347cbf8c23a530aa3130e4edc411a1de9a70d67435
- SHA512
  
  09a89cbfc89766ae62c44a3c77b481f8f3da68b910faf9dd30eeea0e03449d3e00b830bd2452759d0b743b9925dd0387355fa8007a1acd0ce99aeb29ced80658
- SSDEEP
  
  12288:6feCplCUBvCkfmvz756FGtkeSUknzp7tRuvftbObt:+eskUV5a75G0OtXggbt
Score

7^/10

discovery evasion trojan
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan