289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
19/10/2022, 17:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e.exe
Size

698KB
MD5

917b037ccfe24c51c2d4deaa007995ad
SHA1

91edcc2fb181c37a1920602079d6f68215203aa0
SHA256

289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e
SHA512

7eb4d87ad5a757d98a7fef619a0c226264f3b151e0f7bb50908cc40a87f2dda2e41951806bc4945ed069d46ab8b30254507e57537a88732e140932ee360a26fd
SSDEEP

12288:tpr0l29vZ/knYYWTGpn2m6tsIlnQvf2UyYOUntaFQ6aH/db4:7rA2TYYHCpnpmQH2XYOUnETaH

Score

7^/10

evasion

Malware Config

Signatures

Identifies Wine through registry keys 2 TTPs 1 IoCs

Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-2891029575-1462575-1165213807-1000\Software\Wine	289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e.exe

C:\Users\Admin\AppData\Local\Temp\289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e.exe
"C:\Users\Admin\AppData\Local\Temp\289d9ceaf6530ab298972e364233604eeb0e5ab513c2c9153c9e52d5cf6b1e9e.exe"
1⤵
- Identifies Wine through registry keys
PID:1752

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads