General
-
Target
NEAS.865696398a78e7f7ed145b58968a2380.exe
-
Size
4.6MB
-
Sample
231101-rjw9vadf2x
-
MD5
865696398a78e7f7ed145b58968a2380
-
SHA1
aa332b01ec7cfe59d8e8dddc0c4e8212ae60c2d1
-
SHA256
a0bff705bd210f42035e3d3fb75c29d6a5ec0e5124903e0bec04e851e97ea4de
-
SHA512
75f591d1f0ae4dabb2840fa11a55120e497d1bbd4361a462760adca1808bd9cf15c48caa6f6611ead1a1513b5f3074aaf52961f06734efa9a5f5edc6acc762fb
-
SSDEEP
98304:a625YaX+gAH+as+10GETZCSS9SCc6LcRMg9:avSaOJejyQESCc6q
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.865696398a78e7f7ed145b58968a2380.exe
Resource
win7-20231020-en
Malware Config
Targets
-
-
Target
NEAS.865696398a78e7f7ed145b58968a2380.exe
-
Size
4.6MB
-
MD5
865696398a78e7f7ed145b58968a2380
-
SHA1
aa332b01ec7cfe59d8e8dddc0c4e8212ae60c2d1
-
SHA256
a0bff705bd210f42035e3d3fb75c29d6a5ec0e5124903e0bec04e851e97ea4de
-
SHA512
75f591d1f0ae4dabb2840fa11a55120e497d1bbd4361a462760adca1808bd9cf15c48caa6f6611ead1a1513b5f3074aaf52961f06734efa9a5f5edc6acc762fb
-
SSDEEP
98304:a625YaX+gAH+as+10GETZCSS9SCc6LcRMg9:avSaOJejyQESCc6q
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-