fffddfb5285d8f1cbf77dca1b36da73e4ee55bbe96ea20cfe93aec3651b9f483 | Triage

Sharing

General

Target

fffddfb5285d8f1cbf77dca1b36da73e4ee55bbe96ea20cfe93aec3651b9f483
Size

833KB
Sample

221204-l4bkzshd26
MD5

235c34ba1b98f688398d9a9144b89558
SHA1

465f7c39c78c6fa946a8537f7e18785e0c17a3cf
SHA256

fffddfb5285d8f1cbf77dca1b36da73e4ee55bbe96ea20cfe93aec3651b9f483
SHA512

988d337fe06d164921d88f1458383725b80b93545357d8588e5bfc9e803d7f59bda38e35a7bd7773545adbf1c3c005e6ed2e9168b8b07f22eea03b5e9d234657
SSDEEP

24576:pRc+rcbyLTYoGOyu4Wm6vf6/xmfh82oC5KI:UXrWg/yhZoMKI

Score

7^/10

evasion trojan

Malware Config

Targets

- Target
  
  fffddfb5285d8f1cbf77dca1b36da73e4ee55bbe96ea20cfe93aec3651b9f483
- Size
  
  833KB
- MD5
  
  235c34ba1b98f688398d9a9144b89558
- SHA1
  
  465f7c39c78c6fa946a8537f7e18785e0c17a3cf
- SHA256
  
  fffddfb5285d8f1cbf77dca1b36da73e4ee55bbe96ea20cfe93aec3651b9f483
- SHA512
  
  988d337fe06d164921d88f1458383725b80b93545357d8588e5bfc9e803d7f59bda38e35a7bd7773545adbf1c3c005e6ed2e9168b8b07f22eea03b5e9d234657
- SSDEEP
  
  24576:pRc+rcbyLTYoGOyu4Wm6vf6/xmfh82oC5KI:UXrWg/yhZoMKI
Score

7^/10

evasion trojan
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Checks whether UAC is enabled
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2