Overview

overview

7

Static

static

378d505e93...15.exe

windows7-x64

7

378d505e93...15.exe

windows10-2004-x64

3

Analysis

  • max time kernel
    41s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220901-en
  • resource tags

    arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
  • submitted
    29-11-2022 09:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    378d505e93c1c9b2abffcc817bcad8b85d7fe3e2266db2f996d9a20f00a7ab15.exe

  • Size

    142KB

  • MD5

    03e119e1dfc2dc9ee25e48e0a1ea96c0

  • SHA1

    4ec93df46709170897e000c53959344f36181ebb

  • SHA256

    378d505e93c1c9b2abffcc817bcad8b85d7fe3e2266db2f996d9a20f00a7ab15

  • SHA512

    2177c89092b344fbc5b737e6a6bb8c5624934ce58b09d3b1ff69f4707729cc977cbc79fb6f2841c79e5484cd307ca35bcc32005fcf1199dea3d3d348c4434b5e

  • SSDEEP

    3072:YkwJqMr41FMQHNWq3T7nREaks+kTsLZWxzRxom4k1U:1wMMAFMmTHkkTEUxTU

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\378d505e93c1c9b2abffcc817bcad8b85d7fe3e2266db2f996d9a20f00a7ab15.exe
    "C:\Users\Admin\AppData\Local\Temp\378d505e93c1c9b2abffcc817bcad8b85d7fe3e2266db2f996d9a20f00a7ab15.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:1000

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1000-54-0x0000000076561000-0x0000000076563000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1000-55-0x0000000000220000-0x0000000000238000-memory.dmp

    Filesize

    96KB

    Download

  • memory/1000-56-0x0000000000400000-0x0000000000427000-memory.dmp

    Filesize

    156KB

    Download