ed13acd503b18da46c9120f063937e7c3d21144e689ef982fc1b31bdfe2255ee | Triage

Sharing

General

Target

JaffaCakes118_2a2551eedb657815b66001c4ae49c7ee
Size

693KB
Sample

250227-czbkra1wgx
MD5

2a2551eedb657815b66001c4ae49c7ee
SHA1

31b26276084658bce6a6a228d89e7461185ecbb5
SHA256

ed13acd503b18da46c9120f063937e7c3d21144e689ef982fc1b31bdfe2255ee
SHA512

9961d557b609255657bd033ea9eab7d40ad63ba6ebd54bdd6e643b95ca8e636dcd335245646ff1c60203b1dd26d1e829f518544d641a1eab4f127c2159c6b08d
SSDEEP

12288:9r7vPc0OzCsSyfEgYPM92M7uduq0aAeQQJVB1GL+AMoXm7SVlw3DUI:N73c0vsVyL+uwq0leQOB1GL+AMoWWwo

Score

10^/10

defense_evasion discovery trojan

Malware Config

Targets

- Target
  
  JaffaCakes118_2a2551eedb657815b66001c4ae49c7ee
- Size
  
  693KB
- MD5
  
  2a2551eedb657815b66001c4ae49c7ee
- SHA1
  
  31b26276084658bce6a6a228d89e7461185ecbb5
- SHA256
  
  ed13acd503b18da46c9120f063937e7c3d21144e689ef982fc1b31bdfe2255ee
- SHA512
  
  9961d557b609255657bd033ea9eab7d40ad63ba6ebd54bdd6e643b95ca8e636dcd335245646ff1c60203b1dd26d1e829f518544d641a1eab4f127c2159c6b08d
- SSDEEP
  
  12288:9r7vPc0OzCsSyfEgYPM92M7uduq0aAeQQJVB1GL+AMoXm7SVlw3DUI:N73c0vsVyL+uwq0leQOB1GL+AMoWWwo
Score

10^/10

defense_evasion discovery trojan
- UAC bypass
  defense_evasion trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Bypass User Account Control

Defense Evasion

Abuse Elevation Control Mechanism

Bypass User Account Control

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverytrojan

behavioral2

defense_evasiondiscoverytrojan