General
-
Target
83f54c55c5900c37133552e64174e8929a524fb4da3ba3e6aac6df171558d15f
-
Size
6.8MB
-
Sample
220720-cl33vabbam
-
MD5
4f66da142050a062a73e57099082b922
-
SHA1
ea2c0d5d8032833b55dd4d0909551c13414c4831
-
SHA256
83f54c55c5900c37133552e64174e8929a524fb4da3ba3e6aac6df171558d15f
-
SHA512
377fda16429c6c6b6aed65100a5b1b2061b5c77a581a8de32b3737ed72660ca90d83672fc6ef143a67e237d431a6c13e3c483686d5f518858dfcaa25ce7c4103
Behavioral task
behavioral1
Sample
83f54c55c5900c37133552e64174e8929a524fb4da3ba3e6aac6df171558d15f.exe
Resource
win7-20220718-en
Malware Config
Targets
-
-
Target
83f54c55c5900c37133552e64174e8929a524fb4da3ba3e6aac6df171558d15f
-
Size
6.8MB
-
MD5
4f66da142050a062a73e57099082b922
-
SHA1
ea2c0d5d8032833b55dd4d0909551c13414c4831
-
SHA256
83f54c55c5900c37133552e64174e8929a524fb4da3ba3e6aac6df171558d15f
-
SHA512
377fda16429c6c6b6aed65100a5b1b2061b5c77a581a8de32b3737ed72660ca90d83672fc6ef143a67e237d431a6c13e3c483686d5f518858dfcaa25ce7c4103
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-