General
-
Target
e537e89d31d7a4ff6d93d7822263535090fdfd5e6fe9997a2238c00d08d9e40d
-
Size
2.4MB
-
Sample
230323-m8b8rafb95
-
MD5
8c3dd58f0ae830da072858d3b875c194
-
SHA1
328df464d6464f187005fc3a04ad81a225afc8d1
-
SHA256
e537e89d31d7a4ff6d93d7822263535090fdfd5e6fe9997a2238c00d08d9e40d
-
SHA512
7f72a9665ba7a2ecedc0c313616e83c504b91f7cdad565e785347df9070fee2a72370087183aaa92cd759da36849a37ed7cc21b676d4fbf36adc41ee2044c52e
-
SSDEEP
49152:/owKvLLXCD4cStcZwzPo7SW4XXWE5klZFgGwQqwBDMTn5zJS+DLrSUFIC:ZKvLrZntcZ57SW4HWE6Dt1DMtz4+D3Fp
Behavioral task
behavioral1
Sample
e537e89d31d7a4ff6d93d7822263535090fdfd5e6fe9997a2238c00d08d9e40d.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
e537e89d31d7a4ff6d93d7822263535090fdfd5e6fe9997a2238c00d08d9e40d
-
Size
2.4MB
-
MD5
8c3dd58f0ae830da072858d3b875c194
-
SHA1
328df464d6464f187005fc3a04ad81a225afc8d1
-
SHA256
e537e89d31d7a4ff6d93d7822263535090fdfd5e6fe9997a2238c00d08d9e40d
-
SHA512
7f72a9665ba7a2ecedc0c313616e83c504b91f7cdad565e785347df9070fee2a72370087183aaa92cd759da36849a37ed7cc21b676d4fbf36adc41ee2044c52e
-
SSDEEP
49152:/owKvLLXCD4cStcZwzPo7SW4XXWE5klZFgGwQqwBDMTn5zJS+DLrSUFIC:ZKvLrZntcZ57SW4HWE6Dt1DMtz4+D3Fp
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-