Overview

overview

7

Static

static

7

c5eb5f4826...5a.exe

windows7-x64

7

c5eb5f4826...5a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5eb5f482612bba46cb9f35827e3165a

  • Size

    1.0MB

  • Sample

    240313-p29lsadc61

  • MD5

    c5eb5f482612bba46cb9f35827e3165a

  • SHA1

    2ebf6361d114f3104dae12dbc1f490a513634207

  • SHA256

    841e4fc4eaa0378bf6b4d5574fd30cffecd560644234e6d2b95ac4c8111c06d5

  • SHA512

    4fa2d61fc36dc909e7b74b904cd43c10f3f362cfd818f6236a5a377c93cec23f0827d4b8a4e8a5e1840eff6993ffaef54ad7f3da5c2dfe68412afbf9dd7c4464

  • SSDEEP

    24576:UY+GQuaxYwItKvCIg9WRi+G9tcPf2wjHQtQbQ/K2SxKyhPcRgDG3c:2GQv2w74hveX2MVQCrcRV3c

Score
7/10
evasionthemida

Malware Config

Targets

    • Target

      c5eb5f482612bba46cb9f35827e3165a

    • Size

      1.0MB

    • MD5

      c5eb5f482612bba46cb9f35827e3165a

    • SHA1

      2ebf6361d114f3104dae12dbc1f490a513634207

    • SHA256

      841e4fc4eaa0378bf6b4d5574fd30cffecd560644234e6d2b95ac4c8111c06d5

    • SHA512

      4fa2d61fc36dc909e7b74b904cd43c10f3f362cfd818f6236a5a377c93cec23f0827d4b8a4e8a5e1840eff6993ffaef54ad7f3da5c2dfe68412afbf9dd7c4464

    • SSDEEP

      24576:UY+GQuaxYwItKvCIg9WRi+G9tcPf2wjHQtQbQ/K2SxKyhPcRgDG3c:2GQv2w74hveX2MVQCrcRV3c

    Score
    7/10
    evasionthemida

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks