Overview

overview

7

Static

static

7

1fddeb05e7...9a.exe

windows7-x64

7

1fddeb05e7...9a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fddeb05e7fff4f0b6938bff9550b99a

  • Size

    2.1MB

  • Sample

    231225-bnmm7saac8

  • MD5

    1fddeb05e7fff4f0b6938bff9550b99a

  • SHA1

    2c9794d4ea82f8371cfbf7b8b982f982bc653274

  • SHA256

    46337cb5d84611e769a63df34614f86a4b3f74985e610b6c4bbb6b03d0bdd621

  • SHA512

    09ca48aecb6312d3364539ae38580e208fc9e32ba6d866ccb373e0d52642f9ecb3fe9c12894f5e89b15357ab1cc9387fdde3544641e5d05fa94fabfb6b5b3388

  • SSDEEP

    49152:Y2qHSXcYU8y2f+nhBYZFzxXS2j87Hw+jyydrhFbwkcmpjD:5WSMB36S7YZtxeRPteiD

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      1fddeb05e7fff4f0b6938bff9550b99a

    • Size

      2.1MB

    • MD5

      1fddeb05e7fff4f0b6938bff9550b99a

    • SHA1

      2c9794d4ea82f8371cfbf7b8b982f982bc653274

    • SHA256

      46337cb5d84611e769a63df34614f86a4b3f74985e610b6c4bbb6b03d0bdd621

    • SHA512

      09ca48aecb6312d3364539ae38580e208fc9e32ba6d866ccb373e0d52642f9ecb3fe9c12894f5e89b15357ab1cc9387fdde3544641e5d05fa94fabfb6b5b3388

    • SSDEEP

      49152:Y2qHSXcYU8y2f+nhBYZFzxXS2j87Hw+jyydrhFbwkcmpjD:5WSMB36S7YZtxeRPteiD

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks