Overview

overview

9

Static

static

3

c74ee8747d...16.exe

windows7-x64

9

c74ee8747d...16.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c74ee8747d629ba7ee5aab34f1bb6216

  • Size

    6.7MB

  • Sample

    240314-blr5xahc26

  • MD5

    c74ee8747d629ba7ee5aab34f1bb6216

  • SHA1

    8d0b3445985cc6106ee16dfe5a0bcc415e9ba163

  • SHA256

    106b5b04d4b2790de9154ac704df6792223266f66d809932f852036f74803b6f

  • SHA512

    9f12abc6c799007070a28777b5586e6a0dd541d5539b3bd8e0cb678a800674fcf2da7dcfdebf5495d6319ed2fc2495f2120978fe70b6462caa1c4cb30951916f

  • SSDEEP

    98304:HTVVfyVgDa+DjFJmK7sq1pzbo0Ib7/IOW3u9sHvYhtnrSt5Gywb1FZCda/M8LUyO:HCSW+DjFcCl4AOIu9sPYh/rbDZCdE

Score
9/10
evasion

Malware Config

Targets

    • Target

      c74ee8747d629ba7ee5aab34f1bb6216

    • Size

      6.7MB

    • MD5

      c74ee8747d629ba7ee5aab34f1bb6216

    • SHA1

      8d0b3445985cc6106ee16dfe5a0bcc415e9ba163

    • SHA256

      106b5b04d4b2790de9154ac704df6792223266f66d809932f852036f74803b6f

    • SHA512

      9f12abc6c799007070a28777b5586e6a0dd541d5539b3bd8e0cb678a800674fcf2da7dcfdebf5495d6319ed2fc2495f2120978fe70b6462caa1c4cb30951916f

    • SSDEEP

      98304:HTVVfyVgDa+DjFJmK7sq1pzbo0Ib7/IOW3u9sHvYhtnrSt5Gywb1FZCda/M8LUyO:HCSW+DjFcCl4AOIu9sPYh/rbDZCdE

    Score
    9/10
    evasion

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

      evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks