Overview

overview

7

Static

static

3

66bf74733f...4d.exe

windows7-x64

7

66bf74733f...4d.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    66bf74733f9fafb07e9cdd50af82334d

  • Size

    784KB

  • Sample

    240119-fhvtvafha7

  • MD5

    66bf74733f9fafb07e9cdd50af82334d

  • SHA1

    473e00a66543b45ae64432a0475c58e671a48d52

  • SHA256

    9420a4e822b32f20906d47348d4dc7747ea53bf410b722ac085078be4d05dba3

  • SHA512

    1f8e13667a3e7c247d819abf360dfe0069e4998a5ee13b52d5d933a1ebfce1441cf660ffcd933d9f754f652701a6c105f2e649abdf1220dc807c80dce0f9d559

  • SSDEEP

    12288:n+9idM2HW793ndRgaMYKRHIh/P3lPzc/SE/+oGFIvRUY5CxE4oz/:3G2HW79XdRg/qlPKJwsRUY5CxE4w

Score
7/10
evasion

Malware Config

Targets

    • Target

      66bf74733f9fafb07e9cdd50af82334d

    • Size

      784KB

    • MD5

      66bf74733f9fafb07e9cdd50af82334d

    • SHA1

      473e00a66543b45ae64432a0475c58e671a48d52

    • SHA256

      9420a4e822b32f20906d47348d4dc7747ea53bf410b722ac085078be4d05dba3

    • SHA512

      1f8e13667a3e7c247d819abf360dfe0069e4998a5ee13b52d5d933a1ebfce1441cf660ffcd933d9f754f652701a6c105f2e649abdf1220dc807c80dce0f9d559

    • SSDEEP

      12288:n+9idM2HW793ndRgaMYKRHIh/P3lPzc/SE/+oGFIvRUY5CxE4oz/:3G2HW79XdRg/qlPKJwsRUY5CxE4w

    Score
    7/10
    evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks