9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061 | Triage

Sharing

General

Target

9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061
Size

207KB
Sample

221030-pqg3dsbfgq
MD5

929db9db72f5c04c22e4469c7cd4fa00
SHA1

976c38cb29e591e393cb6edc7d73ab0e5859e55d
SHA256

9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061
SHA512

cb2832b11cde61dba9e2ce2d6256b63f83dd7ff5119a1ba81552c56aa165ebc6523e861d90691dbe49d0a34047aa139883975d2af311b5ddbdf36588f6085d96
SSDEEP

1536:Lf2Lw0TRMeZjKW+dw+0Yo8LmNPPM+jMt4jMpjms3n2wBA9T:ywKRMeZ+W+K+WPEOMtlTn2mO

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061
- Size
  
  207KB
- MD5
  
  929db9db72f5c04c22e4469c7cd4fa00
- SHA1
  
  976c38cb29e591e393cb6edc7d73ab0e5859e55d
- SHA256
  
  9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061
- SHA512
  
  cb2832b11cde61dba9e2ce2d6256b63f83dd7ff5119a1ba81552c56aa165ebc6523e861d90691dbe49d0a34047aa139883975d2af311b5ddbdf36588f6085d96
- SSDEEP
  
  1536:Lf2Lw0TRMeZjKW+dw+0Yo8LmNPPM+jMt4jMpjms3n2wBA9T:ywKRMeZ+W+K+WPEOMtlTn2mO
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2