73495f43aeb72d63dd81d0895b12a60d20c833399429c04bc17be1dfbec508cc | Triage

Sharing

General

Target

a3111129974ec85b9604423a45943f6d_JaffaCakes118
Size

679KB
Sample

240817-srbhsavgpq
MD5

a3111129974ec85b9604423a45943f6d
SHA1

35df59033b96398fd8c88038759a4ed65c7d90a8
SHA256

73495f43aeb72d63dd81d0895b12a60d20c833399429c04bc17be1dfbec508cc
SHA512

373557093565ac415fa0b9e81b54bd4a7adcb830e76de8a3527405fcb92e70259f828d97ef1f13d8907b054a6afa64673fa464df1dc14d7a89d7084c3f3bed2a
SSDEEP

12288:j5sPg5982GcycWpxlPi8tB6YdQIcvjigKNUro1DXN/FACI1n9Ixpj:j5+Y9Fhup7PHfXdyYNHNVI19S

Score

7^/10

discovery evasion

Malware Config

Targets

- Target
  
  a3111129974ec85b9604423a45943f6d_JaffaCakes118
- Size
  
  679KB
- MD5
  
  a3111129974ec85b9604423a45943f6d
- SHA1
  
  35df59033b96398fd8c88038759a4ed65c7d90a8
- SHA256
  
  73495f43aeb72d63dd81d0895b12a60d20c833399429c04bc17be1dfbec508cc
- SHA512
  
  373557093565ac415fa0b9e81b54bd4a7adcb830e76de8a3527405fcb92e70259f828d97ef1f13d8907b054a6afa64673fa464df1dc14d7a89d7084c3f3bed2a
- SSDEEP
  
  12288:j5sPg5982GcycWpxlPi8tB6YdQIcvjigKNUro1DXN/FACI1n9Ixpj:j5+Y9Fhup7PHfXdyYNHNVI19S
Score

7^/10

discovery evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion