Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01-07-2024 04:25
General
-
Target
3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176.exe
-
Size
2.6MB
-
MD5
f63e080e77fede5afc7772dd98fd6325
-
SHA1
4b131be624462df4a307ee77cf08a781581fa1fe
-
SHA256
3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176
-
SHA512
6f1fbf16e17a5725e5f43ac32fd53bac8c9b0ecdf156e1e8d8a476d9e03e0f90aa9fe6c8349f4346ff51a038f84d7f54ed6f6b52b0a1cf032132974a907f748d
-
SSDEEP
49152:yC2iQ72kECAgYkhAePJDSlTZonpkJc+ALvM4pGKarLVtG9:N2ickCeOR+ALvlpUVtK
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176.exe"C:\Users\Admin\AppData\Local\Temp\3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176.exe"1⤵
- Identifies Wine through registry keys
- Suspicious behavior: EnumeratesProcesses