1aa425f50611a59978b21de5f0fa17d47474110f00241f469fe2488b471803f3 | Triage

Sharing

General

Target

7ca8e756c9431a1e7e9e87ebebe705ae
Size

166KB
Sample

240128-kkhphshacl
MD5

7ca8e756c9431a1e7e9e87ebebe705ae
SHA1

09e7bafff8e9e0e109d40933300b12243c9019f2
SHA256

1aa425f50611a59978b21de5f0fa17d47474110f00241f469fe2488b471803f3
SHA512

4bae3dc1e4c9305563509799bcd3e937e543e2b403a6c7b450306603c97d07b3851a0bf70a594d6c968d9819a5f283667800a26c0b6c4bacb6fe6226976c74ad
SSDEEP

1536:g/iO/52KyzxGavGsgxzNLWlEEgMNJtGc9YqT6r1oQcTOBq:gR/5UGggxzNClEONvGciqT9QcTOI

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  7ca8e756c9431a1e7e9e87ebebe705ae
- Size
  
  166KB
- MD5
  
  7ca8e756c9431a1e7e9e87ebebe705ae
- SHA1
  
  09e7bafff8e9e0e109d40933300b12243c9019f2
- SHA256
  
  1aa425f50611a59978b21de5f0fa17d47474110f00241f469fe2488b471803f3
- SHA512
  
  4bae3dc1e4c9305563509799bcd3e937e543e2b403a6c7b450306603c97d07b3851a0bf70a594d6c968d9819a5f283667800a26c0b6c4bacb6fe6226976c74ad
- SSDEEP
  
  1536:g/iO/52KyzxGavGsgxzNLWlEEgMNJtGc9YqT6r1oQcTOBq:gR/5UGggxzNClEONvGciqT9QcTOI
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2