Overview

overview

7

Static

static

7

c12c99158a...c8.exe

windows7-x64

7

c12c99158a...c8.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c12c99158ad0aa85b4b979b2c0d986c8

  • Size

    1.0MB

  • Sample

    240311-vzg2msbd32

  • MD5

    c12c99158ad0aa85b4b979b2c0d986c8

  • SHA1

    cc30e1282d870d5719df423c95c5fa4a6e7690c6

  • SHA256

    bd22f3b948b8049fa18a8f0e816f2ec2c45eff7be49530e049f5e254e99edc72

  • SHA512

    74082589b62c4868ac992169a49b8fd95bcb3691e6cad52c251eec6731e84792ada5fe150a1f0649a3d94f754828a6b94e0b6d9c0714cab3533ca7fb7d960168

  • SSDEEP

    24576:y23WTOuCmbc5yA3OL4huNSrBKBUPvIEZ7NOUD:ZVO78uUeUHBNOUD

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      c12c99158ad0aa85b4b979b2c0d986c8

    • Size

      1.0MB

    • MD5

      c12c99158ad0aa85b4b979b2c0d986c8

    • SHA1

      cc30e1282d870d5719df423c95c5fa4a6e7690c6

    • SHA256

      bd22f3b948b8049fa18a8f0e816f2ec2c45eff7be49530e049f5e254e99edc72

    • SHA512

      74082589b62c4868ac992169a49b8fd95bcb3691e6cad52c251eec6731e84792ada5fe150a1f0649a3d94f754828a6b94e0b6d9c0714cab3533ca7fb7d960168

    • SSDEEP

      24576:y23WTOuCmbc5yA3OL4huNSrBKBUPvIEZ7NOUD:ZVO78uUeUHBNOUD

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks