19198af3bd49986ee0cc1d7d82cfc3f069544a577572b05821096784e45781ef | Triage

Sharing

General

Target

3e4cf4655eabc5b485d581ac3a1a43e9_JaffaCakes118
Size

1.7MB
Sample

241013-g7vqtatapa
MD5

3e4cf4655eabc5b485d581ac3a1a43e9
SHA1

af1f3abe7980351380562543d7549aa56622c837
SHA256

19198af3bd49986ee0cc1d7d82cfc3f069544a577572b05821096784e45781ef
SHA512

4eaa7a50fd82ef4e23c0d98da0a195f83ce3bbe6483d6eebb59ec49576815f8e0fb65bf85121bff4271f3af527f50fc52a46ae66454b196b8d88dc69e9f52d94
SSDEEP

49152:YRX8oi7lrzqRdBDAncAzk3WX6uJ9/6S3yz:qZIlrmR3CcAgKLHC

Score

7^/10

discovery evasion

Malware Config

Targets

- Target
  
  3e4cf4655eabc5b485d581ac3a1a43e9_JaffaCakes118
- Size
  
  1.7MB
- MD5
  
  3e4cf4655eabc5b485d581ac3a1a43e9
- SHA1
  
  af1f3abe7980351380562543d7549aa56622c837
- SHA256
  
  19198af3bd49986ee0cc1d7d82cfc3f069544a577572b05821096784e45781ef
- SHA512
  
  4eaa7a50fd82ef4e23c0d98da0a195f83ce3bbe6483d6eebb59ec49576815f8e0fb65bf85121bff4271f3af527f50fc52a46ae66454b196b8d88dc69e9f52d94
- SSDEEP
  
  49152:YRX8oi7lrzqRdBDAncAzk3WX6uJ9/6S3yz:qZIlrmR3CcAgKLHC
Score

7^/10

discovery evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoveryevasion