Analysis
- max time kernel
142s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
05/02/2024, 09:43
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
91a9b27942fdc36ddc24b5dcd12f7bd2.exe
Resource
win7-20231215-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
91a9b27942fdc36ddc24b5dcd12f7bd2.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
- Target 91a9b27942fdc36ddc24b5dcd12f7bd2.exe
- Size 400KB
- Sample240205-lp8l6scha9
- SHA256 111089cf78948c585e195f0e3d472797774af0c9f720feebd84b8484eea86a2d
- MD5 91a9b27942fdc36ddc24b5dcd12f7bd2
- SHA1 80859ec6c417428b4ff75f11df0b21aff4fbc41d
- SHA512 dda44623331245926b0e6970b3483eb8bedb6f58a4db01a99ac66f6dae89f4bc2b1012b120db18476079a590877421105a0c34a08ca30e5bcfe7ac982fb9939e
- SSDEEP 12288:zdnP+U+UnRQoGOzde69Xg+3BUF8LSDB4xu6C:pPFioGOz/NwYdC
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
description ioc Process Key opened \REGISTRY\USER\S-1-5-21-2398549320-3657759451-817663969-1000\Software\Wine 91a9b27942fdc36ddc24b5dcd12f7bd2.exe