aaf7a7dcdde2e9a7901fc0d10a637a10684dbe820f9a9e8476a39199efe1d468 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf7a7dcdde2e9a7901fc0d10a637a10684dbe820f9a9e8476a39199efe1d468
Size

4.1MB
Sample

221107-13lf5abgh7
MD5

c8aee4404cca18f82b78033c1ac67aed
SHA1

cd7119b3e931bcae6f10f0492f65cb195e3f7e9a
SHA256

aaf7a7dcdde2e9a7901fc0d10a637a10684dbe820f9a9e8476a39199efe1d468
SHA512

c954ac995409edbf4149404032ef65f0894a1be8b2ffac9a750ebb10118f942b54123e06f00f7ea1b670a84f4c2d55141aab26e3f5955be6c86bc27fe8f36226
SSDEEP

49152:KEer+zuhFykjipwSAUKqIWGirIzuHj3LKP+7qP/c9N95WLGiTi1SCIUXt68nx:KEHuhwzJdIzS3LKxPE9RWG7SCIOt6wx

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  aaf7a7dcdde2e9a7901fc0d10a637a10684dbe820f9a9e8476a39199efe1d468
- Size
  
  4.1MB
- MD5
  
  c8aee4404cca18f82b78033c1ac67aed
- SHA1
  
  cd7119b3e931bcae6f10f0492f65cb195e3f7e9a
- SHA256
  
  aaf7a7dcdde2e9a7901fc0d10a637a10684dbe820f9a9e8476a39199efe1d468
- SHA512
  
  c954ac995409edbf4149404032ef65f0894a1be8b2ffac9a750ebb10118f942b54123e06f00f7ea1b670a84f4c2d55141aab26e3f5955be6c86bc27fe8f36226
- SSDEEP
  
  49152:KEer+zuhFykjipwSAUKqIWGirIzuHj3LKP+7qP/c9N95WLGiTi1SCIUXt68nx:KEHuhwzJdIzS3LKxPE9RWG7SCIOt6wx
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2