Analysis
-
max time kernel
34s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
06/12/2022, 05:46
General
-
Target
f77102bc343407ffb04fb556cb7997ce1b5711bcc7b09bf6aa088cd11d75d18d.exe
-
Size
360KB
-
MD5
fff55b8f807ac927be651cee03666c73
-
SHA1
e41365c328b6ba6773b988579f7965cc9c9dbb29
-
SHA256
f77102bc343407ffb04fb556cb7997ce1b5711bcc7b09bf6aa088cd11d75d18d
-
SHA512
a53b1f5100ba9c487a03ae83daf50f7de14b4ca40bebd118e43bb381a2bebe2429de3815f9bf750a187f9c1631262f870de67d955b400900b7e3c9b1249c467b
-
SSDEEP
6144:XTyGikftvNZLE5UC2b945QNZYWiWaaMRlb3htkiu/I/aF9qmzBefLFTcW0VhklKK:/rvZpC2PgWiWSlb3htrxaF93zB45oTC1
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SendNotifyMessage 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f77102bc343407ffb04fb556cb7997ce1b5711bcc7b09bf6aa088cd11d75d18d.exe"C:\Users\Admin\AppData\Local\Temp\f77102bc343407ffb04fb556cb7997ce1b5711bcc7b09bf6aa088cd11d75d18d.exe"1⤵
- Identifies Wine through registry keys
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
872KB
-
Filesize
872KB
-
Filesize
8KB
-
Filesize
872KB
-
Filesize
872KB