4f6dbac5a5b4a0daa73ff040146135a344ac14293a94d5fe891b43ddc49bd97f | Triage

Sharing

General

Target

f53f92f8147ffac1faac83100920a477_JaffaCakes118
Size

320KB
Sample

240925-fqqvvszckf
MD5

f53f92f8147ffac1faac83100920a477
SHA1

c775281ec553d2fd92c5ed735f5677c92cecc4ca
SHA256

4f6dbac5a5b4a0daa73ff040146135a344ac14293a94d5fe891b43ddc49bd97f
SHA512

f4e2c809544ac5fe652b2ebbcafc2afed9bea8bc74d4e21e157b9a7c3cc746d6ab970c580c2911b8865f29221e304ff5d42b512c0807da4272c3f08e507faab1
SSDEEP

6144:1q1Wf2DMg9peabEP4kjbFZeNO4uaIIglypH3NG4EA5mE2s2i5NhhPvNGMLro:1I22DMCpeKmpHzIyypXNxnmEAijhf/g

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  f53f92f8147ffac1faac83100920a477_JaffaCakes118
- Size
  
  320KB
- MD5
  
  f53f92f8147ffac1faac83100920a477
- SHA1
  
  c775281ec553d2fd92c5ed735f5677c92cecc4ca
- SHA256
  
  4f6dbac5a5b4a0daa73ff040146135a344ac14293a94d5fe891b43ddc49bd97f
- SHA512
  
  f4e2c809544ac5fe652b2ebbcafc2afed9bea8bc74d4e21e157b9a7c3cc746d6ab970c580c2911b8865f29221e304ff5d42b512c0807da4272c3f08e507faab1
- SSDEEP
  
  6144:1q1Wf2DMg9peabEP4kjbFZeNO4uaIIglypH3NG4EA5mE2s2i5NhhPvNGMLro:1I22DMCpeKmpHzIyypXNxnmEAijhf/g
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation