26a953a639d8985a07a33874ad1905faa0c65bbbbd432da241f4c6044731c3cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b5567b7615010741f9953e47ba4894_JaffaCakes118
Size

316KB
Sample

240727-tfqn1azfja
MD5

78b5567b7615010741f9953e47ba4894
SHA1

39c66143c9f99d657f9533b03ab752236e27869e
SHA256

26a953a639d8985a07a33874ad1905faa0c65bbbbd432da241f4c6044731c3cd
SHA512

98284620bff2bae7934299d9a5e9ac9521b4aa2d273fdc775a8d0072d8adb139a2cbf55bec9e4954d95d3509d9df2e9030a1e100fc817e559e92dba59e93f8b5
SSDEEP

6144:Q3+t/NSaY1nqIa5RjC4w7aja+Wlu6Nzg0cpHK5u6PX8UiNVJ04DuLTEXPcDawNl:e+t/s7hqZhCSjaHu6NzxcpHKXxglDSEM

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  78b5567b7615010741f9953e47ba4894_JaffaCakes118
- Size
  
  316KB
- MD5
  
  78b5567b7615010741f9953e47ba4894
- SHA1
  
  39c66143c9f99d657f9533b03ab752236e27869e
- SHA256
  
  26a953a639d8985a07a33874ad1905faa0c65bbbbd432da241f4c6044731c3cd
- SHA512
  
  98284620bff2bae7934299d9a5e9ac9521b4aa2d273fdc775a8d0072d8adb139a2cbf55bec9e4954d95d3509d9df2e9030a1e100fc817e559e92dba59e93f8b5
- SSDEEP
  
  6144:Q3+t/NSaY1nqIa5RjC4w7aja+Wlu6Nzg0cpHK5u6PX8UiNVJ04DuLTEXPcDawNl:e+t/s7hqZhCSjaHu6NzxcpHKXxglDSEM
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation