Overview

overview

7

Static

static

7

6902d78b19...05.exe

windows7-x64

7

6902d78b19...05.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    91s
  • max time network
    128s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-10-2022 13:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6902d78b19210dd4bd2366de5717468d0762e5430be8a25faaa75333da42c005.exe

  • Size

    615KB

  • MD5

    3f6b75eb8fb937eb581a803df146c8d1

  • SHA1

    6821beb7883f9b53a7d7950bf3f82183e01d7823

  • SHA256

    6902d78b19210dd4bd2366de5717468d0762e5430be8a25faaa75333da42c005

  • SHA512

    4da9cc3c9e25981933687e728940d9036cd9178215a6b2d968656de2fc653dbcca9d70cd603f7055ebec5cb234d4f7702181531968d423bb47747a64beaac248

  • SSDEEP

    12288:dpGjhAf0ecumN16FWjM7kfHq0Ceb1efCpvy9TSV7NYUFwC:dpGCf0xwFEMF071tK27OUB

Score
7/10
evasionthemida

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Processes

  • C:\Users\Admin\AppData\Local\Temp\6902d78b19210dd4bd2366de5717468d0762e5430be8a25faaa75333da42c005.exe
    "C:\Users\Admin\AppData\Local\Temp\6902d78b19210dd4bd2366de5717468d0762e5430be8a25faaa75333da42c005.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:1188

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1188-132-0x0000000000400000-0x0000000000561000-memory.dmp

    Filesize

    1.4MB

    Download