Overview

overview

7

Static

static

7

92cd3886fe...8d.exe

windows7-x64

7

92cd3886fe...8d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    92cd3886fe74c9775fdec2864c80c658a4d494601d009c2726d5a7190eac248d

  • Size

    1.3MB

  • Sample

    221126-n6cbeafa3x

  • MD5

    461b828aded3c08b9661bf02f2290be4

  • SHA1

    27b0c99af826e2ae3dad0025f558cc707ecc6a78

  • SHA256

    92cd3886fe74c9775fdec2864c80c658a4d494601d009c2726d5a7190eac248d

  • SHA512

    e230522f2eb38a1559b6a75d0569f54630ca7a56086a46b5c50954647e98b62a84fe0f8f03b35cd27f4b8eaa22c05a91b278ae9a3f12d3af7a81793b53788a7e

  • SSDEEP

    24576:mOhnjPoH+ksuyVejBfn6WwAwXz+4CkfmNlkwX+mQBO8+HXRx8OjKt:mQAeksteFbdCCku1+mPX8

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      92cd3886fe74c9775fdec2864c80c658a4d494601d009c2726d5a7190eac248d

    • Size

      1.3MB

    • MD5

      461b828aded3c08b9661bf02f2290be4

    • SHA1

      27b0c99af826e2ae3dad0025f558cc707ecc6a78

    • SHA256

      92cd3886fe74c9775fdec2864c80c658a4d494601d009c2726d5a7190eac248d

    • SHA512

      e230522f2eb38a1559b6a75d0569f54630ca7a56086a46b5c50954647e98b62a84fe0f8f03b35cd27f4b8eaa22c05a91b278ae9a3f12d3af7a81793b53788a7e

    • SSDEEP

      24576:mOhnjPoH+ksuyVejBfn6WwAwXz+4CkfmNlkwX+mQBO8+HXRx8OjKt:mQAeksteFbdCCku1+mPX8

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

1
T1012

Virtualization/Sandbox Evasion

1
T1497

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks