98ccda3efdd4f016a8afb1e11fb09822f4b3abac117d438fa62d4f62e9cf03cf | Triage

Sharing

General

Target

d452ced4f9c728f7a77de2e8081ac787
Size

606KB
Sample

240318-x58gwsha8w
MD5

d452ced4f9c728f7a77de2e8081ac787
SHA1

31e218166d07a80427f35c6df66a1c8f6c6e3072
SHA256

98ccda3efdd4f016a8afb1e11fb09822f4b3abac117d438fa62d4f62e9cf03cf
SHA512

7e8d35c3e1b1ba17ae11667dea4a4f678b775e155d4242b819cdba62564ba67f57b1be78a355db6f85488bfd48bc071a34015527f9167c86224e6272c3bf9dee
SSDEEP

12288:jquUk/irBaC4dw5/w3EgyGfedKRZOCgCbvS20a/96MwGdDIl:GB4SBaC4dwC5qKRZOuZ16MwGdD2

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  d452ced4f9c728f7a77de2e8081ac787
- Size
  
  606KB
- MD5
  
  d452ced4f9c728f7a77de2e8081ac787
- SHA1
  
  31e218166d07a80427f35c6df66a1c8f6c6e3072
- SHA256
  
  98ccda3efdd4f016a8afb1e11fb09822f4b3abac117d438fa62d4f62e9cf03cf
- SHA512
  
  7e8d35c3e1b1ba17ae11667dea4a4f678b775e155d4242b819cdba62564ba67f57b1be78a355db6f85488bfd48bc071a34015527f9167c86224e6272c3bf9dee
- SSDEEP
  
  12288:jquUk/irBaC4dw5/w3EgyGfedKRZOCgCbvS20a/96MwGdDIl:GB4SBaC4dwC5qKRZOuZ16MwGdD2
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2