Overview

overview

10

Static

static

3

60fe411b88...9b.exe

windows7-x64

10

60fe411b88...9b.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    147s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06/01/2024, 10:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    60fe411b88b9d8ff7fdcc7d1c2bcb79b.exe

  • Size

    719KB

  • MD5

    60fe411b88b9d8ff7fdcc7d1c2bcb79b

  • SHA1

    b78a3cbd008f9fc0a2369d46f5fc6da9b5aa46ca

  • SHA256

    77c5ebd88db1c4b793ea6b35e13e5578298c4f94ba88c6d2ed1e9018f7707f61

  • SHA512

    35e1119e34d180e48054347b3bb080ab07cdcf2e237f53246506c7fd6ca2a8144617afb04197299ca3aa1cb963454d8a4a9bc1c31dc0a2194bb93f2ecfa87228

  • SSDEEP

    12288:ICx1kJpmp7HMYjTcvWVez4zqDvYRIQnIfHjAXd5eqBFtJTcXPca0amUVRFtSn9ou:ZKJpu7sJHA4g1IrAN5htJg/zfFIn9b

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\60fe411b88b9d8ff7fdcc7d1c2bcb79b.exe
    "C:\Users\Admin\AppData\Local\Temp\60fe411b88b9d8ff7fdcc7d1c2bcb79b.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:2872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2872-0-0x0000000000400000-0x00000000005D7000-memory.dmp

    Filesize

    1.8MB

    Download

  • memory/2872-1-0x0000000000400000-0x00000000005D7000-memory.dmp

    Filesize

    1.8MB

    Download