e1070f476ce2a2a8a7b5f6f29b3ea3b7dd290b94779610e678f3fce65ae65707 | Triage

Sharing

General

Target

7407a70bb56562190734d9b233d04a4e_JaffaCakes118
Size

316KB
Sample

240726-phxswa1bqf
MD5

7407a70bb56562190734d9b233d04a4e
SHA1

4f76321cec6c134503ea06ca4d2f98a388a7a027
SHA256

e1070f476ce2a2a8a7b5f6f29b3ea3b7dd290b94779610e678f3fce65ae65707
SHA512

6e58bb8ea5f45138e5f5ac4ac77607abe20c0bd6f5da3d5ef062fd025a0d1fe03c5603199bae1fde7753c2612624328c302a2aae9fcdc57a55d0d0e2968e724e
SSDEEP

6144:ha/2OPDFHS0IJH0T2fjdL6YV65BWMRQMUrGIvtn8yGulwyS4o5qVG2kiNhg3FtwV:h4lFVT+Z9cBW0hUbp8yc1/YVOUcFtg3T

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  7407a70bb56562190734d9b233d04a4e_JaffaCakes118
- Size
  
  316KB
- MD5
  
  7407a70bb56562190734d9b233d04a4e
- SHA1
  
  4f76321cec6c134503ea06ca4d2f98a388a7a027
- SHA256
  
  e1070f476ce2a2a8a7b5f6f29b3ea3b7dd290b94779610e678f3fce65ae65707
- SHA512
  
  6e58bb8ea5f45138e5f5ac4ac77607abe20c0bd6f5da3d5ef062fd025a0d1fe03c5603199bae1fde7753c2612624328c302a2aae9fcdc57a55d0d0e2968e724e
- SSDEEP
  
  6144:ha/2OPDFHS0IJH0T2fjdL6YV65BWMRQMUrGIvtn8yGulwyS4o5qVG2kiNhg3FtwV:h4lFVT+Z9cBW0hUbp8yc1/YVOUcFtg3T
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation