5460561b6f9282b1b71ade5123b74c9cf54a43ac58b47e1bd82b58c48ff0f468 | Triage

Sharing

General

Target

5460561b6f9282b1b71ade5123b74c9cf54a43ac58b47e1bd82b58c48ff0f468
Size

700KB
Sample

240425-fp34ssga3s
MD5

6bde00b85eccd6d3fb9d434a53ec71ed
SHA1

a9d816b0b4da201fcec810a98adbcc335d493a30
SHA256

5460561b6f9282b1b71ade5123b74c9cf54a43ac58b47e1bd82b58c48ff0f468
SHA512

927253a0bdd0f4e2da371a5d2e194981abb035934153a67d2cc479401da2ae2de20f9adcb5f0690a5e43df2d796e703b159a5c96868e27b8f10ab6e5c37a2a48
SSDEEP

6144:LPYebi/mGoeu5GqBSKdRG0fhiZ0bpErQcWWLOxQ1nQFk8MjrE23e48Jj3Y5:Ji/mXGNNozbI7WWLOxQ1nukIV6

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  5460561b6f9282b1b71ade5123b74c9cf54a43ac58b47e1bd82b58c48ff0f468
- Size
  
  700KB
- MD5
  
  6bde00b85eccd6d3fb9d434a53ec71ed
- SHA1
  
  a9d816b0b4da201fcec810a98adbcc335d493a30
- SHA256
  
  5460561b6f9282b1b71ade5123b74c9cf54a43ac58b47e1bd82b58c48ff0f468
- SHA512
  
  927253a0bdd0f4e2da371a5d2e194981abb035934153a67d2cc479401da2ae2de20f9adcb5f0690a5e43df2d796e703b159a5c96868e27b8f10ab6e5c37a2a48
- SSDEEP
  
  6144:LPYebi/mGoeu5GqBSKdRG0fhiZ0bpErQcWWLOxQ1nQFk8MjrE23e48Jj3Y5:Ji/mXGNNozbI7WWLOxQ1nukIV6
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2