530579c266e96ee30f6562afb46c5a1ac049db86c81109cba599c4f188bf7bb9 | Triage

Sharing

General

Target

530579c266e96ee30f6562afb46c5a1ac049db86c81109cba599c4f188bf7bb9
Size

175KB
Sample

221123-2mlbvsac72
MD5

440892ddb4b0323d5939a910b0b9c671
SHA1

3e8c9497fc6233110f01c186f59980ad53b3c0ca
SHA256

530579c266e96ee30f6562afb46c5a1ac049db86c81109cba599c4f188bf7bb9
SHA512

bd8b0812dacf40b497da52939a15a3992bd2fc82f1ee407a7cbada48cb163a06843fb0088d99147ef72014f7dace1878052771bdba896e8a1c0793cbdb76de60
SSDEEP

3072:2d31Fke+T/aHo4mcjISWGggdXSeFsYwLFXKyn+OWrivvyOHCnN1oofO5v:2dFKD4xMSWGFdXSuNwLF6yfCnN15w

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  530579c266e96ee30f6562afb46c5a1ac049db86c81109cba599c4f188bf7bb9
- Size
  
  175KB
- MD5
  
  440892ddb4b0323d5939a910b0b9c671
- SHA1
  
  3e8c9497fc6233110f01c186f59980ad53b3c0ca
- SHA256
  
  530579c266e96ee30f6562afb46c5a1ac049db86c81109cba599c4f188bf7bb9
- SHA512
  
  bd8b0812dacf40b497da52939a15a3992bd2fc82f1ee407a7cbada48cb163a06843fb0088d99147ef72014f7dace1878052771bdba896e8a1c0793cbdb76de60
- SSDEEP
  
  3072:2d31Fke+T/aHo4mcjISWGggdXSeFsYwLFXKyn+OWrivvyOHCnN1oofO5v:2dFKD4xMSWGFdXSuNwLF6yfCnN15w
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2