Overview

overview

7

Static

static

3

11636791ed...91.exe

windows7-x64

7

11636791ed...91.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    11636791ed228a6da39482130e836891

  • Size

    1.5MB

  • Sample

    231225-j5z9mahgbk

  • MD5

    11636791ed228a6da39482130e836891

  • SHA1

    c2c4d126816c9cf44f3c03bcff39e1ea069d309f

  • SHA256

    bdd2f20e371aa53da7ebcd0ac3b47a90560815ce3d581e1e52f41a185d473e67

  • SHA512

    e8a21a20d9c415dd56c1fbe6e1040c915682be9d6935566370c024afff53ea0763ff496887f71545a84a6108b5a052e05b27cfbf153a3b4917d5d9780e0b5c28

  • SSDEEP

    24576:HitaceEXLbaSgUa9TnB0sY1+TGXf6+/UeQ7WlxkYzN35uKXoj24b0vI9DiMedDXK:HKqgLcB0JpZuWRdU0vIR5edrr/w0pG

Score
7/10
evasion

Malware Config

Targets

    • Target

      11636791ed228a6da39482130e836891

    • Size

      1.5MB

    • MD5

      11636791ed228a6da39482130e836891

    • SHA1

      c2c4d126816c9cf44f3c03bcff39e1ea069d309f

    • SHA256

      bdd2f20e371aa53da7ebcd0ac3b47a90560815ce3d581e1e52f41a185d473e67

    • SHA512

      e8a21a20d9c415dd56c1fbe6e1040c915682be9d6935566370c024afff53ea0763ff496887f71545a84a6108b5a052e05b27cfbf153a3b4917d5d9780e0b5c28

    • SSDEEP

      24576:HitaceEXLbaSgUa9TnB0sY1+TGXf6+/UeQ7WlxkYzN35uKXoj24b0vI9DiMedDXK:HKqgLcB0JpZuWRdU0vIR5edrr/w0pG

    Score
    7/10
    evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks