e7fa19c876223d55ef6d2921e97812b8382c87ab3888a26b37d2dff6725cf5ea | Triage

Sharing

General

Target

af84b56684cbe71af6989d4630769c65_JaffaCakes118
Size

308KB
Sample

240820-rel83sware
MD5

af84b56684cbe71af6989d4630769c65
SHA1

5b07b7ee889e9a0462fadd5d9978d189d8831c94
SHA256

e7fa19c876223d55ef6d2921e97812b8382c87ab3888a26b37d2dff6725cf5ea
SHA512

e89ec034be4a4b145972466ca8c1249875e9f5a074dbb46af63e2e4c7be999fb891dd423c0ec519c478c57f5cadf2ba099853c6d5332a56d830ccad55b4acdcd
SSDEEP

6144:FwE94ztn3jOfmoZQYeK6K21EWZ8+JcN/pW5jhqyDmsX:19k3jOu2SjCWZ8+u/pW5hak

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  af84b56684cbe71af6989d4630769c65_JaffaCakes118
- Size
  
  308KB
- MD5
  
  af84b56684cbe71af6989d4630769c65
- SHA1
  
  5b07b7ee889e9a0462fadd5d9978d189d8831c94
- SHA256
  
  e7fa19c876223d55ef6d2921e97812b8382c87ab3888a26b37d2dff6725cf5ea
- SHA512
  
  e89ec034be4a4b145972466ca8c1249875e9f5a074dbb46af63e2e4c7be999fb891dd423c0ec519c478c57f5cadf2ba099853c6d5332a56d830ccad55b4acdcd
- SSDEEP
  
  6144:FwE94ztn3jOfmoZQYeK6K21EWZ8+JcN/pW5jhqyDmsX:19k3jOu2SjCWZ8+u/pW5hak
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation