f4df03b95c41fe2fb5d2befbb2292955b054ad864d97a3e75adfe90382d26467 | Triage

Sharing

General

Target

8112feec6bf46bf56aac2963f21c143d_JaffaCakes118
Size

108KB
Sample

241031-b6aflawhnr
MD5

8112feec6bf46bf56aac2963f21c143d
SHA1

cf49c41df3fd0acd10eee5b9aa10c04e69e201b3
SHA256

f4df03b95c41fe2fb5d2befbb2292955b054ad864d97a3e75adfe90382d26467
SHA512

70bb8c6862c401ae44f88b54f2bf18590712f72d6c71c8ad9c0ff2374c44937e6ceb0ab140b24f7417e349430dfec05d5504a27af34e08a14f19e0009838c55b
SSDEEP

1536:hE6hDaywldhD7rA6Xmf6VCAop7NX+o3STOARs4h7RmKFzG3f8Yk/5gKN:zsywldhU7yVmp7NX+o3PUEu0kYkhF

Score

7^/10

discovery evasion trojan

Malware Config

Targets

- Target
  
  8112feec6bf46bf56aac2963f21c143d_JaffaCakes118
- Size
  
  108KB
- MD5
  
  8112feec6bf46bf56aac2963f21c143d
- SHA1
  
  cf49c41df3fd0acd10eee5b9aa10c04e69e201b3
- SHA256
  
  f4df03b95c41fe2fb5d2befbb2292955b054ad864d97a3e75adfe90382d26467
- SHA512
  
  70bb8c6862c401ae44f88b54f2bf18590712f72d6c71c8ad9c0ff2374c44937e6ceb0ab140b24f7417e349430dfec05d5504a27af34e08a14f19e0009838c55b
- SSDEEP
  
  1536:hE6hDaywldhD7rA6Xmf6VCAop7NX+o3STOARs4h7RmKFzG3f8Yk/5gKN:zsywldhU7yVmp7NX+o3PUEu0kYkhF
Score

7^/10

discovery evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

discoveryevasiontrojan