f3b05ceec7663021c92bebee1271272d48a6ad0d3e7fd4b1e1ab0f25d68c6fcb | Triage

Sharing

General

Target

95ee1abd4fca6b0aad244b729c791a78_JaffaCakes118
Size

306KB
Sample

240814-nn8lwszdjh
MD5

95ee1abd4fca6b0aad244b729c791a78
SHA1

2e8343cf696ef4761b954b50cc6ab1a0cf96fd27
SHA256

f3b05ceec7663021c92bebee1271272d48a6ad0d3e7fd4b1e1ab0f25d68c6fcb
SHA512

5bc41bb5a209aac7ad1c9f9d506cc11bc1312b5f507be50c6524498bd029eac59c278cec6363f6ef4f80188ffb4160f0ec0719b7d8c5f72d0363e2eeece705bf
SSDEEP

6144:B4B6hecU++BKCav2wq6rLxehVMBalWsgMJGwFA9RxK3dchcqeA1gNS:hevdk03LMBQWmE+sRxKscqJ5

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  95ee1abd4fca6b0aad244b729c791a78_JaffaCakes118
- Size
  
  306KB
- MD5
  
  95ee1abd4fca6b0aad244b729c791a78
- SHA1
  
  2e8343cf696ef4761b954b50cc6ab1a0cf96fd27
- SHA256
  
  f3b05ceec7663021c92bebee1271272d48a6ad0d3e7fd4b1e1ab0f25d68c6fcb
- SHA512
  
  5bc41bb5a209aac7ad1c9f9d506cc11bc1312b5f507be50c6524498bd029eac59c278cec6363f6ef4f80188ffb4160f0ec0719b7d8c5f72d0363e2eeece705bf
- SSDEEP
  
  6144:B4B6hecU++BKCav2wq6rLxehVMBalWsgMJGwFA9RxK3dchcqeA1gNS:hevdk03LMBQWmE+sRxKscqJ5
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation