Overview

overview

7

Static

static

3

b7c423fb8e...c9.exe

windows7-x64

7

b7c423fb8e...c9.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b7c423fb8e86cdf4be05af2550c602c9

  • Size

    937KB

  • Sample

    240306-s48daacd9x

  • MD5

    b7c423fb8e86cdf4be05af2550c602c9

  • SHA1

    ba9edf8942935d9a8ba1f4b17057043f745b0b72

  • SHA256

    e46d7d8193a7dd2e0cf6191973631e085d0762e4d7c48cc0bebfbaf64fa2fcdc

  • SHA512

    2dde4b26cdf6ca85d0aec5197aba93a407c7b0299f2de297b720ab2af905f98e7d9406bdd3590da5845cc0753ad88712ffe2899f37f3c830722cde5710dc0e9f

  • SSDEEP

    24576:YmegShTwRC2c0iqoXez7/cYz0ODLPOwSYFH8RuR3qCr:degSRw3cbez7EY9DLGwhH3qC

Score
7/10
evasion

Malware Config

Targets

    • Target

      b7c423fb8e86cdf4be05af2550c602c9

    • Size

      937KB

    • MD5

      b7c423fb8e86cdf4be05af2550c602c9

    • SHA1

      ba9edf8942935d9a8ba1f4b17057043f745b0b72

    • SHA256

      e46d7d8193a7dd2e0cf6191973631e085d0762e4d7c48cc0bebfbaf64fa2fcdc

    • SHA512

      2dde4b26cdf6ca85d0aec5197aba93a407c7b0299f2de297b720ab2af905f98e7d9406bdd3590da5845cc0753ad88712ffe2899f37f3c830722cde5710dc0e9f

    • SSDEEP

      24576:YmegShTwRC2c0iqoXez7/cYz0ODLPOwSYFH8RuR3qCr:degSRw3cbez7EY9DLGwhH3qC

    Score
    7/10
    evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks