Overview

overview

8

Static

static

137c77733b...bd.exe

windows7-x64

8

137c77733b...bd.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    137c77733b784e0b71cf036ae94d28dbde2c75e23e41611854673f0ece187ebd

  • Size

    284KB

  • Sample

    221206-anbp9sbb67

  • MD5

    2b86e41c47a73965f31071e9f823a6c5

  • SHA1

    2eeb0f495049d2b17aa7b56fb805afc3e41d722d

  • SHA256

    137c77733b784e0b71cf036ae94d28dbde2c75e23e41611854673f0ece187ebd

  • SHA512

    0df345740ff30b1c75e3c66c7bfd84b8ee914ab7d635741c2e0117178412f7145fc23dcf2a5f9becd2643d3c929c31020bbb3621cee5baa9742a0f15751511cd

  • SSDEEP

    6144:205XASk3NyyIk88dxDxQLVlZAYvRQYThzAZ/x40X2:2gkQyU6xuZ0pCUZrG

Score
8/10
evasionpersistence

Malware Config

Targets

    • Target

      137c77733b784e0b71cf036ae94d28dbde2c75e23e41611854673f0ece187ebd

    • Size

      284KB

    • MD5

      2b86e41c47a73965f31071e9f823a6c5

    • SHA1

      2eeb0f495049d2b17aa7b56fb805afc3e41d722d

    • SHA256

      137c77733b784e0b71cf036ae94d28dbde2c75e23e41611854673f0ece187ebd

    • SHA512

      0df345740ff30b1c75e3c66c7bfd84b8ee914ab7d635741c2e0117178412f7145fc23dcf2a5f9becd2643d3c929c31020bbb3621cee5baa9742a0f15751511cd

    • SSDEEP

      6144:205XASk3NyyIk88dxDxQLVlZAYvRQYThzAZ/x40X2:2gkQyU6xuZ0pCUZrG

    Score
    8/10
    evasionpersistence

    • Executes dropped EXE

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks