5224e77e3662f69ae1f554ef4737301567411803828355e0718945ecc7f3d6fd | Triage

Sharing

General

Target

2d95eaa898c7c653be7fe5ad8a8bb394_JaffaCakes118
Size

1.7MB
Sample

241009-jr1cgawerm
MD5

2d95eaa898c7c653be7fe5ad8a8bb394
SHA1

f42293cb82ff3a7f9491b9a2498fd15a4144c407
SHA256

5224e77e3662f69ae1f554ef4737301567411803828355e0718945ecc7f3d6fd
SHA512

b74b177c014d47112f2f236e27b1d8f81ab60255758c12dbb22b07d6d0f4337fc51b3484ad4c87c42d124ae1510f5d4e1e826b17b6cbb90e5ca45b45042f88a3
SSDEEP

49152:V6tGner/kIzUBDDExDf29HZjbDLnZc9NH3:4tGe7nmINOV1tcbX

Score

7^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  2d95eaa898c7c653be7fe5ad8a8bb394_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  2d95eaa898c7c653be7fe5ad8a8bb394
- SHA1
  
  f42293cb82ff3a7f9491b9a2498fd15a4144c407
- SHA256
  
  5224e77e3662f69ae1f554ef4737301567411803828355e0718945ecc7f3d6fd
- SHA512
  
  b74b177c014d47112f2f236e27b1d8f81ab60255758c12dbb22b07d6d0f4337fc51b3484ad4c87c42d124ae1510f5d4e1e826b17b6cbb90e5ca45b45042f88a3
- SSDEEP
  
  49152:V6tGner/kIzUBDDExDf29HZjbDLnZc9NH3:4tGe7nmINOV1tcbX
Score

7^/10

discovery evasion persistence
- Executes dropped EXE
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence

behavioral2

discoveryevasion