7982335930d90919d68bdb80bf7ee84696162ff6fb254aefbd1ecac08e53c28e | Triage

Sharing

General

Target

ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118
Size

305KB
Sample

240921-lmkgkavhrd
MD5

ef84612c8c29a4678fe7f1383ddd9223
SHA1

f99b219341ace8537ec43080e7386d7cdda866f1
SHA256

7982335930d90919d68bdb80bf7ee84696162ff6fb254aefbd1ecac08e53c28e
SHA512

75354ef2258342ed7a29059e31979743079a888e4e0c72f20a51a0edbc0f574172731a18ca1231cacc3c251e7ce7ae43a9eb7bf3a870263bb8b618e6e672dce2
SSDEEP

6144:CuD65ruUXr5QAz3yYKGL9WQYUOq1aVVomMPb3jSj5Xa6yA3zan5o0iwY:CuD65KIyAry5EWG+V2jPbTi5Xa6Qqn

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  ef84612c8c29a4678fe7f1383ddd9223_JaffaCakes118
- Size
  
  305KB
- MD5
  
  ef84612c8c29a4678fe7f1383ddd9223
- SHA1
  
  f99b219341ace8537ec43080e7386d7cdda866f1
- SHA256
  
  7982335930d90919d68bdb80bf7ee84696162ff6fb254aefbd1ecac08e53c28e
- SHA512
  
  75354ef2258342ed7a29059e31979743079a888e4e0c72f20a51a0edbc0f574172731a18ca1231cacc3c251e7ce7ae43a9eb7bf3a870263bb8b618e6e672dce2
- SSDEEP
  
  6144:CuD65ruUXr5QAz3yYKGL9WQYUOq1aVVomMPb3jSj5Xa6yA3zan5o0iwY:CuD65KIyAry5EWG+V2jPbTi5Xa6Qqn
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation