Overview

overview

7

Static

static

7

160e7e89d8...c7.exe

windows7-x64

7

160e7e89d8...c7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    160e7e89d893c5d948df96ce071090c7

  • Size

    2.9MB

  • Sample

    231230-ml9whacee9

  • MD5

    160e7e89d893c5d948df96ce071090c7

  • SHA1

    b5307c49c455a498c107bce824414147ce81ded0

  • SHA256

    7fc21c67281870000850f10277e869eafc4ad5be871846e8685ed0a7c9b829b4

  • SHA512

    65046f3aa53926be7c8e0f2cd951f8a3207663fae2e00eb9ef81bac0cf62fde4943e1f9e69447e567d9740fa39aec47769429c4f6f4f001945a3efebc059e86f

  • SSDEEP

    49152:kxy2Jtqd8NizIoaOAZBgxQ6w0a1ZdVn67g9g9a388:kxy2b28NikoCBWLUZdh9g9aM8

Score
7/10
evasionpersistencethemida

Malware Config

Targets

    • Target

      160e7e89d893c5d948df96ce071090c7

    • Size

      2.9MB

    • MD5

      160e7e89d893c5d948df96ce071090c7

    • SHA1

      b5307c49c455a498c107bce824414147ce81ded0

    • SHA256

      7fc21c67281870000850f10277e869eafc4ad5be871846e8685ed0a7c9b829b4

    • SHA512

      65046f3aa53926be7c8e0f2cd951f8a3207663fae2e00eb9ef81bac0cf62fde4943e1f9e69447e567d9740fa39aec47769429c4f6f4f001945a3efebc059e86f

    • SSDEEP

      49152:kxy2Jtqd8NizIoaOAZBgxQ6w0a1ZdVn67g9g9a388:kxy2b28NikoCBWLUZdh9g9aM8

    Score
    7/10
    evasionpersistencethemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks