55e1691f669d53266622be52d96076b6f5fa3e70742dd705e7c949aae00aa0d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dd566cc1b7d4074a851c803383e45dad_JaffaCakes118
Size

319KB
Sample

240913-azjj9avajn
MD5

dd566cc1b7d4074a851c803383e45dad
SHA1

1a91e41fbb3854c8a25050edfdec832a72da6430
SHA256

55e1691f669d53266622be52d96076b6f5fa3e70742dd705e7c949aae00aa0d6
SHA512

16042c47ef86762b0d059a85cbc5d75965ada5f08d18af1864fbfaa0d15b8b24b317ddf2f80b6b040412e674021699c8484a7daed0f648ad8560a325208a7872
SSDEEP

6144:zzM7xJjtdFwUCgXGuGRBIcByPyy1ckKjSw6uUqXLcArkdfsxVv:+JjtdFw4TUBIX1cVue+A4SxVv

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  dd566cc1b7d4074a851c803383e45dad_JaffaCakes118
- Size
  
  319KB
- MD5
  
  dd566cc1b7d4074a851c803383e45dad
- SHA1
  
  1a91e41fbb3854c8a25050edfdec832a72da6430
- SHA256
  
  55e1691f669d53266622be52d96076b6f5fa3e70742dd705e7c949aae00aa0d6
- SHA512
  
  16042c47ef86762b0d059a85cbc5d75965ada5f08d18af1864fbfaa0d15b8b24b317ddf2f80b6b040412e674021699c8484a7daed0f648ad8560a325208a7872
- SSDEEP
  
  6144:zzM7xJjtdFwUCgXGuGRBIcByPyy1ckKjSw6uUqXLcArkdfsxVv:+JjtdFw4TUBIX1cVue+A4SxVv
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation