Analysis
-
max time kernel
141s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
-
submitted
07/05/2024, 01:23
General
-
Target
正式版-小农民v2.49.exe
-
Size
11.9MB
-
MD5
b84ccc03f6fd2d1124eecbda834c4e75
-
SHA1
7de526dc8904e594fb399ff27a5f7d638f463eff
-
SHA256
0ec03204e15eb77f17a47756b9b02045da92e1f1bd1143f39dc7079dd560f6b2
-
SHA512
afc2942952c1006ead89f6f1b32a99dae5936e4fb6d4ea3eb6b88d4495442b2f642a3094424b908e1c53aab4b149df9a7cd15718b9129fd88f41239164881eb7
-
SSDEEP
196608:CVW+jzu3SZ04wKNmi9/+84VE93fYJH+59ygz56k:CwN4wKxZlLEHYMk
Malware Config
Signatures
-
Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs
-
Checks BIOS information in registry 2 TTPs 2 IoCs
BIOS information is often read in order to detect sandboxing environments.
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Loads dropped DLL 2 IoCs
-
Modifies registry class 36 IoCs
-
Suspicious use of SetWindowsHookEx 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\正式版-小农民v2.49.exe"C:\Users\Admin\AppData\Local\Temp\正式版-小农民v2.49.exe"1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Checks BIOS information in registry
- Identifies Wine through registry keys
- Loads dropped DLL
- Modifies registry class
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB
MD56fd574e95162899689a886002e84d9ed
SHA1db246eaa609b02702ac4e8b89e9ce9c45348ee24
SHA25697be6f2e9a1acbb6c691c10e0fd54d950404786300c2be142bbe498455ffc6a1
SHA51210f6c3d8a023e03bc4d805798bbe6580f8c9ed45438dd874990359a44fb9aeded99a52de1e11839dc214822298f686251b65bbd8791024fe6a9420a985cc418e
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
6.3MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
6.3MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB
-
Filesize
8.8MB