Overview

overview

7

Static

static

9289da8fa1...61.exe

windows7-x64

7

9289da8fa1...61.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    112s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2022, 12:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061.exe

  • Size

    207KB

  • MD5

    929db9db72f5c04c22e4469c7cd4fa00

  • SHA1

    976c38cb29e591e393cb6edc7d73ab0e5859e55d

  • SHA256

    9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061

  • SHA512

    cb2832b11cde61dba9e2ce2d6256b63f83dd7ff5119a1ba81552c56aa165ebc6523e861d90691dbe49d0a34047aa139883975d2af311b5ddbdf36588f6085d96

  • SSDEEP

    1536:Lf2Lw0TRMeZjKW+dw+0Yo8LmNPPM+jMt4jMpjms3n2wBA9T:ywKRMeZ+W+K+WPEOMtlTn2mO

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061.exe
    "C:\Users\Admin\AppData\Local\Temp\9289da8fa10dbe28121cc2f6ccba1a683d525963ac9ff7192b46c25d2fb5a061.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:1312

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1312-132-0x0000000000400000-0x0000000000439000-memory.dmp

          Filesize

          228KB

          Download