bc00380dbd24ae52bbc3fdbe5026bfc2d2f8495b5411a63edb1e9efc0fe8704a | Triage

Sharing

General

Target

JaffaCakes118_2a24c39c3a1183238519f4341a94a93e
Size

414KB
Sample

250227-cy6phasl17
MD5

2a24c39c3a1183238519f4341a94a93e
SHA1

4e69115cfdc0804e5b105bc593303acd6d6eef25
SHA256

bc00380dbd24ae52bbc3fdbe5026bfc2d2f8495b5411a63edb1e9efc0fe8704a
SHA512

94e55ee5a29a8ac47a402d45800b3a173ba8715c1046bd73ff7144d3c5999e5b317ddde83e2b90a7704ecb4537881ce58932565eee4cd5fef89602982bb0bd40
SSDEEP

12288:M5HOVtq0yBtaQ5e7MbeImnM62QGJK/X3n8w:M5hBtJU4Gn2K/

Score

10^/10

defense_evasion discovery persistence trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_2a24c39c3a1183238519f4341a94a93e
- Size
  
  414KB
- MD5
  
  2a24c39c3a1183238519f4341a94a93e
- SHA1
  
  4e69115cfdc0804e5b105bc593303acd6d6eef25
- SHA256
  
  bc00380dbd24ae52bbc3fdbe5026bfc2d2f8495b5411a63edb1e9efc0fe8704a
- SHA512
  
  94e55ee5a29a8ac47a402d45800b3a173ba8715c1046bd73ff7144d3c5999e5b317ddde83e2b90a7704ecb4537881ce58932565eee4cd5fef89602982bb0bd40
- SSDEEP
  
  12288:M5HOVtq0yBtaQ5e7MbeImnM62QGJK/X3n8w:M5hBtJU4Gn2K/
Score

10^/10

defense_evasion discovery persistence trojan
- UAC bypass
  defense_evasion trojan
- Windows security bypass
  defense_evasion trojan
- Disables taskbar notifications via registry modification
  defense_evasion
- Windows security modification
  defense_evasion trojan
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistencetrojan

behavioral2