Overview

overview

9

Static

static

76382348bf...c4.exe

windows7-x64

9

76382348bf...c4.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76382348bf2c90ec0e28e2611e30ca6bfa4b7ac3c7e01b4e2924ed34414b89c4

  • Size

    918KB

  • Sample

    221004-frxd2adda3

  • MD5

    4c36313d1354d5ecb76925b868b0a256

  • SHA1

    b34d744c5199b0e6e1d303525af0583937dd54e6

  • SHA256

    76382348bf2c90ec0e28e2611e30ca6bfa4b7ac3c7e01b4e2924ed34414b89c4

  • SHA512

    19d76c97297977bec813a1ea1f38630fdf5fb91060547ce3f4817b3124ad7c114ef5edca4967c559129683fcff993451c0f1765e840fa8bf851c14204dee9030

  • SSDEEP

    24576:m6ys1au7Tlp30x4MY49R44z4hDgr4kaib/:mds8sTbu4MJ9W4i0rvai/

Score
9/10
evasion

Malware Config

Targets

    • Target

      76382348bf2c90ec0e28e2611e30ca6bfa4b7ac3c7e01b4e2924ed34414b89c4

    • Size

      918KB

    • MD5

      4c36313d1354d5ecb76925b868b0a256

    • SHA1

      b34d744c5199b0e6e1d303525af0583937dd54e6

    • SHA256

      76382348bf2c90ec0e28e2611e30ca6bfa4b7ac3c7e01b4e2924ed34414b89c4

    • SHA512

      19d76c97297977bec813a1ea1f38630fdf5fb91060547ce3f4817b3124ad7c114ef5edca4967c559129683fcff993451c0f1765e840fa8bf851c14204dee9030

    • SSDEEP

      24576:m6ys1au7Tlp30x4MY49R44z4hDgr4kaib/:mds8sTbu4MJ9W4i0rvai/

    Score
    9/10
    evasion

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks