Analysis
- max time kernel
144s - max time network
146s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
04/02/2024, 15:46
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8f8add322f3c78bdd267eb04b997d4e9.exe
Resource
win7-20231129-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f8add322f3c78bdd267eb04b997d4e9.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 8f8add322f3c78bdd267eb04b997d4e9.exe
- Size 669KB
- Sample240204-s753bsfdhl
- SHA256 ee798ca3018a2f8b66444a6e45fd0e80494cf6628e7d315c41c27d716b690798
- MD5 8f8add322f3c78bdd267eb04b997d4e9
- SHA1 fd1c8062f7fe67ff554acd54fb0f0827a4d3a8c5
- SHA512 e27efe96ad0b45170cb27b13e49fda86aad691f9364189633c6efaa963495e0ce9f07c97181b7d6f6fc2503567a754f327650763d494ed2f07cb4c1ff3340ae1
- SSDEEP 12288:Q0aNzHaQ9DA44VdmIULqiTIYIt2Y/ZNbi3XxWN1RrfoaKWEe659aK:3al6+DNqohLH/IffR0aKN9X
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Software\Wine 8f8add322f3c78bdd267eb04b997d4e9.exe