General
-
Target
81fa3ab70e5c7995e2b0816d25d7fa03587b101bb32dee51cd6a10272ee680fb
-
Size
815KB
-
Sample
221129-hpdv1saa71
-
MD5
39d502ce5ce86a323beae3b4d21c3510
-
SHA1
9dae0017e0b4a6b0c84b283b1e4d59637d40b380
-
SHA256
81fa3ab70e5c7995e2b0816d25d7fa03587b101bb32dee51cd6a10272ee680fb
-
SHA512
d70ed3df0cbc4fa5a39a5fc978c56a77048b546222a65aec62cd9b09eb37fca1ca66dd0996c2e97651bc408fa901512a97524826226056ae6101626a9d5809a0
-
SSDEEP
24576:mAbEuC50en8G+4Q/CzxOp5LCrVxrf3VlUpVbacw:V9e8GbskxO/SrwpVd
Behavioral task
behavioral1
Sample
81fa3ab70e5c7995e2b0816d25d7fa03587b101bb32dee51cd6a10272ee680fb.exe
Resource
win7-20221111-en
Malware Config
Targets
-
-
Target
81fa3ab70e5c7995e2b0816d25d7fa03587b101bb32dee51cd6a10272ee680fb
-
Size
815KB
-
MD5
39d502ce5ce86a323beae3b4d21c3510
-
SHA1
9dae0017e0b4a6b0c84b283b1e4d59637d40b380
-
SHA256
81fa3ab70e5c7995e2b0816d25d7fa03587b101bb32dee51cd6a10272ee680fb
-
SHA512
d70ed3df0cbc4fa5a39a5fc978c56a77048b546222a65aec62cd9b09eb37fca1ca66dd0996c2e97651bc408fa901512a97524826226056ae6101626a9d5809a0
-
SSDEEP
24576:mAbEuC50en8G+4Q/CzxOp5LCrVxrf3VlUpVbacw:V9e8GbskxO/SrwpVd
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-