General
-
Target
d38347d12101e57b4e97bf41bf33cc3803596b1d3b26e12257d29994e5756ca0
-
Size
942KB
-
Sample
220731-z8dg2aghf3
-
MD5
5e1e009e6d4276b63cbce7dc50f6f41c
-
SHA1
3fba19da9c47d7d2e54a52349ab4b6529ca23b23
-
SHA256
d38347d12101e57b4e97bf41bf33cc3803596b1d3b26e12257d29994e5756ca0
-
SHA512
743d1ff0d8364d6ae2476707689b1da8a69976ddcd4505d21f798b63881269c1b651dcc0bc85ce13f4d5b058e8b982142847c17e4785aaa34fd14e418ee4d67c
Behavioral task
behavioral1
Sample
d38347d12101e57b4e97bf41bf33cc3803596b1d3b26e12257d29994e5756ca0.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
d38347d12101e57b4e97bf41bf33cc3803596b1d3b26e12257d29994e5756ca0
-
Size
942KB
-
MD5
5e1e009e6d4276b63cbce7dc50f6f41c
-
SHA1
3fba19da9c47d7d2e54a52349ab4b6529ca23b23
-
SHA256
d38347d12101e57b4e97bf41bf33cc3803596b1d3b26e12257d29994e5756ca0
-
SHA512
743d1ff0d8364d6ae2476707689b1da8a69976ddcd4505d21f798b63881269c1b651dcc0bc85ce13f4d5b058e8b982142847c17e4785aaa34fd14e418ee4d67c
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-