cc95a079ef21304dd588aa1359156b225725bf70b4b03738c8f2551572795ed0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d51ab0cbb700431226260783b5a293fb_JaffaCakes118
Size

2.3MB
Sample

240908-z63n5sybnd
MD5

d51ab0cbb700431226260783b5a293fb
SHA1

0e1030b9a3335724cb06e74dc491bd70d119e1f5
SHA256

cc95a079ef21304dd588aa1359156b225725bf70b4b03738c8f2551572795ed0
SHA512

64d202ce833975f009b50154f930c6083822d5c6ec04791d96732f5ede012ebfedad23c461d4bc42c5668f325bb80c525f96cb9ea24245ba6f85b7ffb738bd9a
SSDEEP

49152:fvBzd2SmhcvWkDyZKEVj/d4ohYAiekWG7JeSiPsli:FYSm3kDyZ5brriekWGgSiP5

Score

7^/10

discovery evasion

Malware Config

Targets

- Target
  
  d51ab0cbb700431226260783b5a293fb_JaffaCakes118
- Size
  
  2.3MB
- MD5
  
  d51ab0cbb700431226260783b5a293fb
- SHA1
  
  0e1030b9a3335724cb06e74dc491bd70d119e1f5
- SHA256
  
  cc95a079ef21304dd588aa1359156b225725bf70b4b03738c8f2551572795ed0
- SHA512
  
  64d202ce833975f009b50154f930c6083822d5c6ec04791d96732f5ede012ebfedad23c461d4bc42c5668f325bb80c525f96cb9ea24245ba6f85b7ffb738bd9a
- SSDEEP
  
  49152:fvBzd2SmhcvWkDyZKEVj/d4ohYAiekWG7JeSiPsli:FYSm3kDyZ5brriekWGgSiP5
Score

7^/10

discovery evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion