dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e | Triage

Sharing

General

Target

dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
Size

220KB
Sample

221203-pcnysacg6w
MD5

6e367f79530e116bab9aaa133fb36da6
SHA1

04a670221645d772fdf58c8a04790d1deae6731c
SHA256

dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
SHA512

bba7c9f6681bc1cca92a65a6b76b6eb2ecb63071c24963420bcb0573bc45b30e82d4964f09058976bc08f9a4623489fa580f750303f471c95e0f0a2e9571481b
SSDEEP

3072:dEun/n3SOkL8OO5yzgqwBZzBn5QXQl8lLGZcnF/jP7pqXcaE+d/MbvmVOd:dEGn3pkL9ZsqwBZVLKF/HpqM0//Vc

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
- Size
  
  220KB
- MD5
  
  6e367f79530e116bab9aaa133fb36da6
- SHA1
  
  04a670221645d772fdf58c8a04790d1deae6731c
- SHA256
  
  dbb76032e11b9314404355963bf563c56ed71f0e78909a97fb3757380f1cc25e
- SHA512
  
  bba7c9f6681bc1cca92a65a6b76b6eb2ecb63071c24963420bcb0573bc45b30e82d4964f09058976bc08f9a4623489fa580f750303f471c95e0f0a2e9571481b
- SSDEEP
  
  3072:dEun/n3SOkL8OO5yzgqwBZzBn5QXQl8lLGZcnF/jP7pqXcaE+d/MbvmVOd:dEGn3pkL9ZsqwBZVLKF/HpqM0//Vc
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2