3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176 | Triage

Sharing

General

Target

3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176
Size

2.6MB
Sample

240701-e2gkwszark
MD5

f63e080e77fede5afc7772dd98fd6325
SHA1

4b131be624462df4a307ee77cf08a781581fa1fe
SHA256

3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176
SHA512

6f1fbf16e17a5725e5f43ac32fd53bac8c9b0ecdf156e1e8d8a476d9e03e0f90aa9fe6c8349f4346ff51a038f84d7f54ed6f6b52b0a1cf032132974a907f748d
SSDEEP

49152:yC2iQ72kECAgYkhAePJDSlTZonpkJc+ALvM4pGKarLVtG9:N2ickCeOR+ALvlpUVtK

Score

7^/10

evasion

Malware Config

Targets

- Target
  
  3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176
- Size
  
  2.6MB
- MD5
  
  f63e080e77fede5afc7772dd98fd6325
- SHA1
  
  4b131be624462df4a307ee77cf08a781581fa1fe
- SHA256
  
  3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176
- SHA512
  
  6f1fbf16e17a5725e5f43ac32fd53bac8c9b0ecdf156e1e8d8a476d9e03e0f90aa9fe6c8349f4346ff51a038f84d7f54ed6f6b52b0a1cf032132974a907f748d
- SSDEEP
  
  49152:yC2iQ72kECAgYkhAePJDSlTZonpkJc+ALvM4pGKarLVtG9:N2ickCeOR+ALvlpUVtK
Score

7^/10

evasion
- Identifies Wine through registry keys
  Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
  evasion
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Query Registry

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2