General
-
Target
cf8da38672301efe7329608eb1e24a769f12ad91f642619651bc59a4f5650a1f
-
Size
1.4MB
-
Sample
221127-atjytsbb61
-
MD5
0988855252bfb261b0f630764ca835d1
-
SHA1
1342dd3aa522650893bb71d21461e47415650b73
-
SHA256
cf8da38672301efe7329608eb1e24a769f12ad91f642619651bc59a4f5650a1f
-
SHA512
cb7b72feba3288188193b63203096623294eec087ca12bb68503587e4cd7922e4d5b5daedd176fb551cfe2407a6ce02ebaf8a4a050548eeca53d203c0ad794c6
-
SSDEEP
24576:cYXWrDFI/n1gqXFppJKlFLNL5eY2vZOzPrRC66rx9DRYYXlwJo3ifbI15:5mN+qqFTJQNL5eatZW7RY+bifbIv
Behavioral task
behavioral1
Sample
cf8da38672301efe7329608eb1e24a769f12ad91f642619651bc59a4f5650a1f.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
cf8da38672301efe7329608eb1e24a769f12ad91f642619651bc59a4f5650a1f
-
Size
1.4MB
-
MD5
0988855252bfb261b0f630764ca835d1
-
SHA1
1342dd3aa522650893bb71d21461e47415650b73
-
SHA256
cf8da38672301efe7329608eb1e24a769f12ad91f642619651bc59a4f5650a1f
-
SHA512
cb7b72feba3288188193b63203096623294eec087ca12bb68503587e4cd7922e4d5b5daedd176fb551cfe2407a6ce02ebaf8a4a050548eeca53d203c0ad794c6
-
SSDEEP
24576:cYXWrDFI/n1gqXFppJKlFLNL5eY2vZOzPrRC66rx9DRYYXlwJo3ifbI15:5mN+qqFTJQNL5eatZW7RY+bifbIv
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-