f6fc539112852c4f49e082ec0ffa2725ca324a1b1a3a4251eff5c1a04fd7e300 | Triage

Sharing

General

Target

e0089e1183219749a7f4fee3f8927107_JaffaCakes118
Size

416KB
Sample

240914-mw4gga1anc
MD5

e0089e1183219749a7f4fee3f8927107
SHA1

3c58cc4043e1867c15ef7ad0ca1a19357004ec5f
SHA256

f6fc539112852c4f49e082ec0ffa2725ca324a1b1a3a4251eff5c1a04fd7e300
SHA512

976fd1ced84b411f41d5e0176c1f4ddc8929666d65d589160700aa2db514d3011dd6707338f68f6433d627c5bd120c2f54ed1bdc2ab580887e8ab8a1c6e1a43d
SSDEEP

12288:MWQxEaLV5DoORxTyfAMcUYMZ4Fm5oeJEMTYJ3QL:MWuZxTyxcUDNNEDQ

Score

7^/10

discovery evasion

Malware Config

Targets

- Target
  
  e0089e1183219749a7f4fee3f8927107_JaffaCakes118
- Size
  
  416KB
- MD5
  
  e0089e1183219749a7f4fee3f8927107
- SHA1
  
  3c58cc4043e1867c15ef7ad0ca1a19357004ec5f
- SHA256
  
  f6fc539112852c4f49e082ec0ffa2725ca324a1b1a3a4251eff5c1a04fd7e300
- SHA512
  
  976fd1ced84b411f41d5e0176c1f4ddc8929666d65d589160700aa2db514d3011dd6707338f68f6433d627c5bd120c2f54ed1bdc2ab580887e8ab8a1c6e1a43d
- SSDEEP
  
  12288:MWQxEaLV5DoORxTyfAMcUYMZ4Fm5oeJEMTYJ3QL:MWuZxTyxcUDNNEDQ
Score

7^/10

discovery evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

behavioral2

discoveryevasion