18d319c9222d1274b5e01b0e5671a8be0208a06bf4bb5fb1ce9f8060539ae0d3 | Triage

Sharing

General

Target

18d319c9222d1274b5e01b0e5671a8be0208a06bf4bb5fb1ce9f8060539ae0d3
Size

1.5MB
Sample

231012-frb34agg9z
MD5

c4c79c2af093cb5ebb2b21374e0c7c85
SHA1

5544f7b824155cd2aa6daf0be6ebc63fbf922d00
SHA256

18d319c9222d1274b5e01b0e5671a8be0208a06bf4bb5fb1ce9f8060539ae0d3
SHA512

cbc1444d31486679e93678de7918cab421cc411b75232831a5f95f97dd3a977b075f714ced28f1853ac56980bde17875dbebd3b74232e0b9711caecaad273b5a
SSDEEP

24576:P0J4aTPlBMRC+adPw74VCvJF4IySgQCYjIPRhXxj7ekxcicBNwFmPUwqHKH+ulfk:P0J4aTddq4VCvJF4IySgQCYjIPRhdYgH

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  18d319c9222d1274b5e01b0e5671a8be0208a06bf4bb5fb1ce9f8060539ae0d3
- Size
  
  1.5MB
- MD5
  
  c4c79c2af093cb5ebb2b21374e0c7c85
- SHA1
  
  5544f7b824155cd2aa6daf0be6ebc63fbf922d00
- SHA256
  
  18d319c9222d1274b5e01b0e5671a8be0208a06bf4bb5fb1ce9f8060539ae0d3
- SHA512
  
  cbc1444d31486679e93678de7918cab421cc411b75232831a5f95f97dd3a977b075f714ced28f1853ac56980bde17875dbebd3b74232e0b9711caecaad273b5a
- SSDEEP
  
  24576:P0J4aTPlBMRC+adPw74VCvJF4IySgQCYjIPRhXxj7ekxcicBNwFmPUwqHKH+ulfk:P0J4aTddq4VCvJF4IySgQCYjIPRhdYgH
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2