efe3d95fe9fcace5489412a8eb03832e344ed12ce64da186f205415d2b476c8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118
Size

306KB
Sample

240724-b67q4a1dmn
MD5

69cbd2648e165a7fb7941e4eb8d986d4
SHA1

0f25f01f94d0a7a4c2ed79b5b73877abd477a2ac
SHA256

efe3d95fe9fcace5489412a8eb03832e344ed12ce64da186f205415d2b476c8e
SHA512

bf49618c0b99cc86703651777b076753890b7bcfc68cd5c4d0dfec0a4903a01c314511a6cc42bd61796885044b2b80788421f2f90a161da209a5cfbe8e5abc52
SSDEEP

6144:k5QpZGqoblOwc2LhMsh+zCZZ30Efy2uOSvL0eZtWPylwJDNJi:k5Qeqs0wc2Fh+zCP3KOUL0aWPvNJi

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  69cbd2648e165a7fb7941e4eb8d986d4_JaffaCakes118
- Size
  
  306KB
- MD5
  
  69cbd2648e165a7fb7941e4eb8d986d4
- SHA1
  
  0f25f01f94d0a7a4c2ed79b5b73877abd477a2ac
- SHA256
  
  efe3d95fe9fcace5489412a8eb03832e344ed12ce64da186f205415d2b476c8e
- SHA512
  
  bf49618c0b99cc86703651777b076753890b7bcfc68cd5c4d0dfec0a4903a01c314511a6cc42bd61796885044b2b80788421f2f90a161da209a5cfbe8e5abc52
- SSDEEP
  
  6144:k5QpZGqoblOwc2LhMsh+zCZZ30Efy2uOSvL0eZtWPylwJDNJi:k5Qeqs0wc2Fh+zCP3KOUL0aWPvNJi
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation