9667cb68897be57871e7a55f870ff45ae14c33b6d96cd5407acb979f2f0c67ca | Triage

Sharing

General

Target

0dab8b5a1e31d4ab57fb7a95f9ca961f_JaffaCakes118
Size

1004KB
Sample

240625-l6rd8awgkp
MD5

0dab8b5a1e31d4ab57fb7a95f9ca961f
SHA1

f032f8c74f968939416c482908c0ff280686f403
SHA256

9667cb68897be57871e7a55f870ff45ae14c33b6d96cd5407acb979f2f0c67ca
SHA512

5244a7bd7222d9c188658efd53bf4166eafec1eb81069ee3011d22cf8e3c1b1ea3cf8453fd31c2e3c79bc921f8bf323f15f52727330181413d710be3063d6aa6
SSDEEP

24576:b7cBEQrL8Iqhu3lo23NcgBo+A437wdVuyYUpDqQsKNv/gTJVk:/cBEQ/K4lo2NrrqVu8puQss

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  0dab8b5a1e31d4ab57fb7a95f9ca961f_JaffaCakes118
- Size
  
  1004KB
- MD5
  
  0dab8b5a1e31d4ab57fb7a95f9ca961f
- SHA1
  
  f032f8c74f968939416c482908c0ff280686f403
- SHA256
  
  9667cb68897be57871e7a55f870ff45ae14c33b6d96cd5407acb979f2f0c67ca
- SHA512
  
  5244a7bd7222d9c188658efd53bf4166eafec1eb81069ee3011d22cf8e3c1b1ea3cf8453fd31c2e3c79bc921f8bf323f15f52727330181413d710be3063d6aa6
- SSDEEP
  
  24576:b7cBEQrL8Iqhu3lo23NcgBo+A437wdVuyYUpDqQsKNv/gTJVk:/cBEQ/K4lo2NrrqVu8puQss
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2