6b0850165dc1128b168aa6feb05f89f8a6fd835f064ae796afb48cbbc87f701c | Triage™

Login
Reports

Overview

overview

5

Static

static

3

c0ac5b0c81...18.dll

windows7-x64

3

c0ac5b0c81...18.dll

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
c0ac5b0c8122b897603ff72df9c4db46_JaffaCakes118
Size 315KB
Sample240825-nwhensthqm
SHA256 6b0850165dc1128b168aa6feb05f89f8a6fd835f064ae796afb48cbbc87f701c
MD5 c0ac5b0c8122b897603ff72df9c4db46
SHA1 a874a907ae3499cd3cd47ccac1e7fb401de8c56e
SHA512 21335adecbc7808eab56107110bc6dc2c9566f03f378e02f51882adbab62feec8868c7c55b8b34c927be88995239e6e0d1becb7edbfa9b1b83c6e61946cf9309
SSDEEP 6144:dLavqzGOoVud0DElLgANamGgMmeIG0ThXcpPs2Ahz1ORKcsfc/A:YvN/VClMcMmel21ORK70/A
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

discovery persistence privilege_escalation

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

c0ac5b0c8122b897603ff72df9c4db46_JaffaCakes118.dll

Resource

win7-20240705-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

c0ac5b0c8122b897603ff72df9c4db46_JaffaCakes118.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

4 signatures

150 seconds

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  c0ac5b0c8122b897603ff72df9c4db46_JaffaCakes118
- Size 315KB
- SHA256 6b0850165dc1128b168aa6feb05f89f8a6fd835f064ae796afb48cbbc87f701c
- MD5 c0ac5b0c8122b897603ff72df9c4db46
- SHA1 a874a907ae3499cd3cd47ccac1e7fb401de8c56e
- SHA512 21335adecbc7808eab56107110bc6dc2c9566f03f378e02f51882adbab62feec8868c7c55b8b34c927be88995239e6e0d1becb7edbfa9b1b83c6e61946cf9309
- SSDEEP 6144:dLavqzGOoVud0DElLgANamGgMmeIG0ThXcpPs2Ahz1ORKcsfc/A:YvN/VClMcMmel21ORK70/A
- MD5 SHA1 SHA512 SSDEEP
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation

© 2018-2026

Terms | Privacy