8ccdd6131ce06e1d92ae933501aa87b27dbcb10a918907c12e720e850f8056fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b09bf816ada5b7c8534f29a13041b0b_JaffaCakes118
Size

310KB
Sample

241012-t5g36avblj
MD5

3b09bf816ada5b7c8534f29a13041b0b
SHA1

49b63a0ccb6a5d354601bd679adbaf2dacd95963
SHA256

8ccdd6131ce06e1d92ae933501aa87b27dbcb10a918907c12e720e850f8056fe
SHA512

0ca2c086763c032cf913e0db6989f32bc8222a530f4fb93053d54a8e85509b4609967463ee2fea8f66f5cfff227fe5c70c927d3c675ccef1a0716072eef7d9f8
SSDEEP

6144:0KvF3Dx78E5/U5RvWzkCv0rCcgu+5QMuRG/+awf1jh7BBoXKToKgCBWG5ffM7:0I3DW6Lk92h5QMuR1h7BBo6Thp5ffM7

Score

5^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  3b09bf816ada5b7c8534f29a13041b0b_JaffaCakes118
- Size
  
  310KB
- MD5
  
  3b09bf816ada5b7c8534f29a13041b0b
- SHA1
  
  49b63a0ccb6a5d354601bd679adbaf2dacd95963
- SHA256
  
  8ccdd6131ce06e1d92ae933501aa87b27dbcb10a918907c12e720e850f8056fe
- SHA512
  
  0ca2c086763c032cf913e0db6989f32bc8222a530f4fb93053d54a8e85509b4609967463ee2fea8f66f5cfff227fe5c70c927d3c675ccef1a0716072eef7d9f8
- SSDEEP
  
  6144:0KvF3Dx78E5/U5RvWzkCv0rCcgu+5QMuRG/+awf1jh7BBoXKToKgCBWG5ffM7:0I3DW6Lk92h5QMuR1h7BBo6Thp5ffM7
Score

5^/10

discovery persistence privilege_escalation
- Boot or Logon Autostart Execution: Authentication Package
  Suspicious Windows Authentication Registry Modification.
  persistence privilege_escalation
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Authentication Package

Privilege Escalation

Boot or Logon Autostart Execution

Authentication Package

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistenceprivilege_escalation