69656261bdff763de31566b5d8b7aa8ca7ee623cd93e931c343c67aeb52324e1 | Triage

Sharing

General

Target

d02e76072d1b97cec1d8f17e5999305b_JaffaCakes118
Size

296KB
Sample

240906-wz8d9s1gnf
MD5

d02e76072d1b97cec1d8f17e5999305b
SHA1

565fadb20e66eb8c615e0bb9606a7390d8fb0587
SHA256

69656261bdff763de31566b5d8b7aa8ca7ee623cd93e931c343c67aeb52324e1
SHA512

908a0da4b9224ac311fddc31c15b927033a5047cfe125977fa55cc579d991a4c6197fa4c341a41b8162e1083be754ce118110a767ce9d2c464a9b4cded1b5539
SSDEEP

6144:1YGEnKgIrJpV8K2v6Q0mJHmGBKlWpowY1q5ygp3wLTHpweMwPV:y9KHJpV8Ku5AKKGowY1q5lpSTHpweDt

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  d02e76072d1b97cec1d8f17e5999305b_JaffaCakes118
- Size
  
  296KB
- MD5
  
  d02e76072d1b97cec1d8f17e5999305b
- SHA1
  
  565fadb20e66eb8c615e0bb9606a7390d8fb0587
- SHA256
  
  69656261bdff763de31566b5d8b7aa8ca7ee623cd93e931c343c67aeb52324e1
- SHA512
  
  908a0da4b9224ac311fddc31c15b927033a5047cfe125977fa55cc579d991a4c6197fa4c341a41b8162e1083be754ce118110a767ce9d2c464a9b4cded1b5539
- SSDEEP
  
  6144:1YGEnKgIrJpV8K2v6Q0mJHmGBKlWpowY1q5ygp3wLTHpweMwPV:y9KHJpV8Ku5AKKGowY1q5lpSTHpweDt
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation