Overview

overview

7

Static

static

3

b81d31bf4b...14.exe

windows7-x64

7

b81d31bf4b...14.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    140s
  • max time network
    123s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-03-2024 20:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b81d31bf4baf7ab5f90f15a0632c6814.exe

  • Size

    975KB

  • MD5

    b81d31bf4baf7ab5f90f15a0632c6814

  • SHA1

    a0cb5c8692cc0b69b1997da8bc4b6ca3dec7f807

  • SHA256

    f5c0447663b7667c2106c72fdaf44055f25ce26d826b68198a666d8a10d979b3

  • SHA512

    aa9e6d70662c89ffce9e0fbfe5190fd3ea23421c3fabc26240cdc693eba71ecdd4aa50e1f2c145cf205915c77a37a3db3442cb8be3b60a872a5f589e945f894f

  • SSDEEP

    12288:Aw+bMncsUGXOuccWWPVycWsNOKpVNFLBhTmrps+3y:Aw5ncxhuccddycXbNVsBy

Score
7/10
evasion

Malware Config

Signatures

  • Identifies Wine through registry keys 2 TTPs 1 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    evasion

Processes

  • C:\Users\Admin\AppData\Local\Temp\b81d31bf4baf7ab5f90f15a0632c6814.exe
    "C:\Users\Admin\AppData\Local\Temp\b81d31bf4baf7ab5f90f15a0632c6814.exe"
    1⤵
    • Identifies Wine through registry keys
    PID:1760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1760-0-0x0000000000400000-0x00000000005BF000-memory.dmp

    Filesize

    1.7MB

    Download

  • memory/1760-1-0x0000000000400000-0x00000000005BF000-memory.dmp

    Filesize

    1.7MB

    Download