6d40ef7c401bceff1c007139ade12cb340b65c417af8403bcd1d43f403196ec0 | Triage

Sharing

General

Target

JaffaCakes118_27a1a0664e032fbc633d1f191b883227
Size

277KB
Sample

250125-djvjcstpak
MD5

27a1a0664e032fbc633d1f191b883227
SHA1

402388a316f3166cca0d1b1d55788d182b217823
SHA256

6d40ef7c401bceff1c007139ade12cb340b65c417af8403bcd1d43f403196ec0
SHA512

be9a7b7ff195ee56ed5051a97b0cadda583f21f6c61b4eeaa2d4ce90cb92838a486869fedc279eebb1bbad49c7c9bbcea983951f6af05e614842d133984e0607
SSDEEP

6144:yuosqxoUo62bLTZuifHeVvNXwgQ3lzJxnTYICHDxYsprsJjNS:yqqxoUorbLTZRfH+tPQrNY7jxY6rs/S

Score

10^/10

adware defense_evasion discovery stealer trojan upx

Malware Config

Targets

- Target
  
  JaffaCakes118_27a1a0664e032fbc633d1f191b883227
- Size
  
  277KB
- MD5
  
  27a1a0664e032fbc633d1f191b883227
- SHA1
  
  402388a316f3166cca0d1b1d55788d182b217823
- SHA256
  
  6d40ef7c401bceff1c007139ade12cb340b65c417af8403bcd1d43f403196ec0
- SHA512
  
  be9a7b7ff195ee56ed5051a97b0cadda583f21f6c61b4eeaa2d4ce90cb92838a486869fedc279eebb1bbad49c7c9bbcea983951f6af05e614842d133984e0607
- SSDEEP
  
  6144:yuosqxoUo62bLTZuifHeVvNXwgQ3lzJxnTYICHDxYsprsJjNS:yqqxoUorbLTZRfH+tPQrNY7jxY6rs/S
Score

10^/10

adware defense_evasion discovery stealer trojan upx
- UAC bypass
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwaredefense_evasiondiscoverystealertrojanupx

behavioral2

adwaredefense_evasiondiscoverystealertrojanupx