General
-
Target
66744784b22d5d1698f9755cdcc226c644aec3a8cd9c551aa7aa5845ed19b614
-
Size
1012KB
-
Sample
240610-kr93cafd43
-
MD5
58678eb1df7e8bf574e67573a2beddaa
-
SHA1
f185b9c1d1591ee0ab44985a93040768afe802c2
-
SHA256
66744784b22d5d1698f9755cdcc226c644aec3a8cd9c551aa7aa5845ed19b614
-
SHA512
a607c8642b2743ee310f98a7c9012f3e1e509cf6e03515ac6a8459415c023d9593304a8dc3fbe0b6e7c121442b6d2824bb2a92e69fce083072aeef19d2f6068b
-
SSDEEP
24576:832ENjlweu7EIU+K3e31NPY6RDuVKZsqS+AI3ipytEb9jhz:832EoR7Ad36NA6RUKZsqS+ATgi
Static task
static1
Behavioral task
behavioral1
Sample
66744784b22d5d1698f9755cdcc226c644aec3a8cd9c551aa7aa5845ed19b614.exe
Resource
win7-20240508-en
Malware Config
Targets
-
-
Target
66744784b22d5d1698f9755cdcc226c644aec3a8cd9c551aa7aa5845ed19b614
-
Size
1012KB
-
MD5
58678eb1df7e8bf574e67573a2beddaa
-
SHA1
f185b9c1d1591ee0ab44985a93040768afe802c2
-
SHA256
66744784b22d5d1698f9755cdcc226c644aec3a8cd9c551aa7aa5845ed19b614
-
SHA512
a607c8642b2743ee310f98a7c9012f3e1e509cf6e03515ac6a8459415c023d9593304a8dc3fbe0b6e7c121442b6d2824bb2a92e69fce083072aeef19d2f6068b
-
SSDEEP
24576:832ENjlweu7EIU+K3e31NPY6RDuVKZsqS+AI3ipytEb9jhz:832EoR7Ad36NA6RUKZsqS+ATgi
-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Identifies Wine through registry keys
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1