2d9f92726dbfc57f8209c3da06596b507da3ba922674a3a13f266ede7eb6150a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77370d622640e79183901fe26b55ee26_JaffaCakes118
Size

1.9MB
Sample

240727-g12wjsthph
MD5

77370d622640e79183901fe26b55ee26
SHA1

d0aa03004c428a38695e7d0271fc77ec058a7f4c
SHA256

2d9f92726dbfc57f8209c3da06596b507da3ba922674a3a13f266ede7eb6150a
SHA512

ba6b5b8a5922d2cde4901ae5bc39e23ab1617456f855074afc501af1443e0d2152b5418caf0642414a4bbfdbd6ff8c5e17fd479239f9d88505a00380755ac71e
SSDEEP

49152:EAbDmUnk8mJSiK2pLqlJTC/wdIGA5SBOsIjF:EAbhnkrLK2Yj+wiGA5K0

Score

7^/10

discovery evasion

Malware Config

Targets

- Target
  
  77370d622640e79183901fe26b55ee26_JaffaCakes118
- Size
  
  1.9MB
- MD5
  
  77370d622640e79183901fe26b55ee26
- SHA1
  
  d0aa03004c428a38695e7d0271fc77ec058a7f4c
- SHA256
  
  2d9f92726dbfc57f8209c3da06596b507da3ba922674a3a13f266ede7eb6150a
- SHA512
  
  ba6b5b8a5922d2cde4901ae5bc39e23ab1617456f855074afc501af1443e0d2152b5418caf0642414a4bbfdbd6ff8c5e17fd479239f9d88505a00380755ac71e
- SSDEEP
  
  49152:EAbDmUnk8mJSiK2pLqlJTC/wdIGA5SBOsIjF:EAbhnkrLK2Yj+wiGA5K0
Score

7^/10

discovery evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion