Overview

overview

9

Static

static

43c271b3c3...c2.dll

windows7-x64

9

43c271b3c3...c2.dll

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43c271b3c387f5f3485483313e9f018ba329cf0aa7104f596ab20a85ed06a9c2

  • Size

    877KB

  • Sample

    221125-3qc1bsfd54

  • MD5

    1350e6e13548cf0d9e4a7e1c5f1876b8

  • SHA1

    7049bb9974ff8d98fb4ff1a808efe5efd65b4701

  • SHA256

    43c271b3c387f5f3485483313e9f018ba329cf0aa7104f596ab20a85ed06a9c2

  • SHA512

    e29058f867a6f78ab08de94121423e8fee3503d56ea552b0b7bcd5f0fc13a6a6b0d73d215e1c9484f1b20a9e4956d69afc82810c97a5dfdccead209b8c4b51d4

  • SSDEEP

    24576:XdFR7JhaFknia2nFJLU6LMSHf+ZoVVjWo:R7JIFkctMI+aVNh

Score
9/10
evasion

Malware Config

Targets

    • Target

      43c271b3c387f5f3485483313e9f018ba329cf0aa7104f596ab20a85ed06a9c2

    • Size

      877KB

    • MD5

      1350e6e13548cf0d9e4a7e1c5f1876b8

    • SHA1

      7049bb9974ff8d98fb4ff1a808efe5efd65b4701

    • SHA256

      43c271b3c387f5f3485483313e9f018ba329cf0aa7104f596ab20a85ed06a9c2

    • SHA512

      e29058f867a6f78ab08de94121423e8fee3503d56ea552b0b7bcd5f0fc13a6a6b0d73d215e1c9484f1b20a9e4956d69afc82810c97a5dfdccead209b8c4b51d4

    • SSDEEP

      24576:XdFR7JhaFknia2nFJLU6LMSHf+ZoVVjWo:R7JIFkctMI+aVNh

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks