f651bb19b9c1d44438f6d0015a41d2711b1833ed12f521170df516e31c818cb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a7e0f4f5e8def1de91574ffd8a6dec
Size

1.6MB
Sample

240105-215mnacbgq
MD5

44a7e0f4f5e8def1de91574ffd8a6dec
SHA1

c687280332f3874c3f3ee074b1efab12583be6cd
SHA256

f651bb19b9c1d44438f6d0015a41d2711b1833ed12f521170df516e31c818cb5
SHA512

7e790ef921fc80a1a87d61feb77599500931c32c1dc8b7a3eb7b43f2078abe6ce813a86eeabbdb1e530aa219e207c6357989e4b6bb80f8ba3a31dfa514c6c6c5
SSDEEP

49152:0sK8WpBT+e5Wl95ne61OElzqBElkMv0GgCt2CboDI:0KW2UWlCJEleBJ/GgWoU

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  44a7e0f4f5e8def1de91574ffd8a6dec
- Size
  
  1.6MB
- MD5
  
  44a7e0f4f5e8def1de91574ffd8a6dec
- SHA1
  
  c687280332f3874c3f3ee074b1efab12583be6cd
- SHA256
  
  f651bb19b9c1d44438f6d0015a41d2711b1833ed12f521170df516e31c818cb5
- SHA512
  
  7e790ef921fc80a1a87d61feb77599500931c32c1dc8b7a3eb7b43f2078abe6ce813a86eeabbdb1e530aa219e207c6357989e4b6bb80f8ba3a31dfa514c6c6c5
- SSDEEP
  
  49152:0sK8WpBT+e5Wl95ne61OElzqBElkMv0GgCt2CboDI:0KW2UWlCJEleBJ/GgWoU
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2