14d561e07ac0746d38844098fb52618d8ee20484927bd2ad4ffd26dde3ef7ad3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7de99818c62f9caa2342700c6659d215
Size

528KB
Sample

240128-y6j2csback
MD5

7de99818c62f9caa2342700c6659d215
SHA1

6d26cec0a22ebbd7db65bb2168490974869fd7c5
SHA256

14d561e07ac0746d38844098fb52618d8ee20484927bd2ad4ffd26dde3ef7ad3
SHA512

d169c97cbd505b42d2a7a47c684f16cfd26da3eb5bb3d49ca6fca644e94872914818af613d838555a7fc54f88d11628aa7de10bb21f769f86b399545a8e0fba0
SSDEEP

12288:AeQvT9K0yv0BvmSO1uyV0JrZk7veGyslP9vgVcyO1Hlmo+c:BQxju0pmX1utZIvj/x1Hoo+

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  7de99818c62f9caa2342700c6659d215
- Size
  
  528KB
- MD5
  
  7de99818c62f9caa2342700c6659d215
- SHA1
  
  6d26cec0a22ebbd7db65bb2168490974869fd7c5
- SHA256
  
  14d561e07ac0746d38844098fb52618d8ee20484927bd2ad4ffd26dde3ef7ad3
- SHA512
  
  d169c97cbd505b42d2a7a47c684f16cfd26da3eb5bb3d49ca6fca644e94872914818af613d838555a7fc54f88d11628aa7de10bb21f769f86b399545a8e0fba0
- SSDEEP
  
  12288:AeQvT9K0yv0BvmSO1uyV0JrZk7veGyslP9vgVcyO1Hlmo+c:BQxju0pmX1utZIvj/x1Hoo+
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2