a9417ce241dba90e4d600a3f7b234d3a69a8b6e7c54eb9f5504bec36dbcd8f66 | Triage

Sharing

General

Target

3dc2de6ead8b050703a089a9a99996b3
Size

689KB
Sample

240101-yvbkvahbeq
MD5

3dc2de6ead8b050703a089a9a99996b3
SHA1

84172af08dfcd74f70edb1eb5021543138c99fc6
SHA256

a9417ce241dba90e4d600a3f7b234d3a69a8b6e7c54eb9f5504bec36dbcd8f66
SHA512

b272ed902c668cbd520d6bf9f16e2ff2dcdc00194f03a902aa1f1e144cb9ec0b4bcf1ad6591a4ab143e477d0a58621bc074b1f927db0b945c21396142e257726
SSDEEP

12288:RRhtcl4r/lT2xWx5lxU4ldKVXBBgnLbr70aDjxjd68O1DVe0ZKs6/D:ttcYR2xWPvbIBgEaD768mDVe0ZK

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  3dc2de6ead8b050703a089a9a99996b3
- Size
  
  689KB
- MD5
  
  3dc2de6ead8b050703a089a9a99996b3
- SHA1
  
  84172af08dfcd74f70edb1eb5021543138c99fc6
- SHA256
  
  a9417ce241dba90e4d600a3f7b234d3a69a8b6e7c54eb9f5504bec36dbcd8f66
- SHA512
  
  b272ed902c668cbd520d6bf9f16e2ff2dcdc00194f03a902aa1f1e144cb9ec0b4bcf1ad6591a4ab143e477d0a58621bc074b1f927db0b945c21396142e257726
- SSDEEP
  
  12288:RRhtcl4r/lT2xWx5lxU4ldKVXBBgnLbr70aDjxjd68O1DVe0ZKs6/D:ttcYR2xWPvbIBgEaD768mDVe0ZK
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2