b1eb4cd6640d8356807e974a2c857e09846e45574d5b640e91b2a5f0d7cf4e7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da086dce6bb184e533f899f51a9430fb_JaffaCakes118
Size

307KB
Sample

240911-k7ax7atcre
MD5

da086dce6bb184e533f899f51a9430fb
SHA1

72293cb49564cb86cf9330ddc210f587c8722396
SHA256

b1eb4cd6640d8356807e974a2c857e09846e45574d5b640e91b2a5f0d7cf4e7b
SHA512

de567bdbf94e8a3f443913dae766321c68bfa41fc4278e22869c26afa9b1b2a97cf54c8db53b723361efce1d8d08a74d7b3a5f4ef2f1471494f09a0d914aa9c6
SSDEEP

6144:6I/UK/07u5Ie2y2SjorP8QOmeH6Ar8CPaHZNfICHrhHJpR4Yxy:lVOe2ybk4Nraa80a7ICHDTy

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  da086dce6bb184e533f899f51a9430fb_JaffaCakes118
- Size
  
  307KB
- MD5
  
  da086dce6bb184e533f899f51a9430fb
- SHA1
  
  72293cb49564cb86cf9330ddc210f587c8722396
- SHA256
  
  b1eb4cd6640d8356807e974a2c857e09846e45574d5b640e91b2a5f0d7cf4e7b
- SHA512
  
  de567bdbf94e8a3f443913dae766321c68bfa41fc4278e22869c26afa9b1b2a97cf54c8db53b723361efce1d8d08a74d7b3a5f4ef2f1471494f09a0d914aa9c6
- SSDEEP
  
  6144:6I/UK/07u5Ie2y2SjorP8QOmeH6Ar8CPaHZNfICHrhHJpR4Yxy:lVOe2ybk4Nraa80a7ICHDTy
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation