e957eba7ced7c650830b9735fbcef7a7d6d297cce014b80c0807cf179de4ad37 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a66d92268bf1cab2447014114eb7f498_JaffaCakes118
Size

307KB
Sample

240818-mjbwpasdkn
MD5

a66d92268bf1cab2447014114eb7f498
SHA1

7f1676a122cff9cbb659d5cbdaf8c70531c63d84
SHA256

e957eba7ced7c650830b9735fbcef7a7d6d297cce014b80c0807cf179de4ad37
SHA512

2835de927011843d209b6b09f2983f04d54a582e659467ce695a4ce645e57e8dddc50b2b6b530c88101d07d922d21cf7cf8f9d593d5a920af6a078298455c5b7
SSDEEP

6144:4jO396/QJ5Qa+ygf91SCjHXswHjwfeaE7wPIzocA52lGH4:4S3NJT+yi91nH8wk2XwuoFIlGH4

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  a66d92268bf1cab2447014114eb7f498_JaffaCakes118
- Size
  
  307KB
- MD5
  
  a66d92268bf1cab2447014114eb7f498
- SHA1
  
  7f1676a122cff9cbb659d5cbdaf8c70531c63d84
- SHA256
  
  e957eba7ced7c650830b9735fbcef7a7d6d297cce014b80c0807cf179de4ad37
- SHA512
  
  2835de927011843d209b6b09f2983f04d54a582e659467ce695a4ce645e57e8dddc50b2b6b530c88101d07d922d21cf7cf8f9d593d5a920af6a078298455c5b7
- SSDEEP
  
  6144:4jO396/QJ5Qa+ygf91SCjHXswHjwfeaE7wPIzocA52lGH4:4S3NJT+yi91nH8wk2XwuoFIlGH4
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation