Analysis
-
max time kernel
96s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02/10/2024, 07:37
General
-
Target
Correspondencia_Digital.exe
-
Size
673KB
-
MD5
d07d7fe4ed884ddfe8926b9d47c8e09f
-
SHA1
5c819af49d58fefa6aeb7b783ca4df4facc79d72
-
SHA256
6eb125810384e179d2504c0ce9785f953300d480d71b55390729324cdd005abd
-
SHA512
dd1210e6c79041f2fd979b7683f378dfcc40be8bd56e652bb0f020967717ca060caf6f52c593927b2864ed1abbed3bc4bd91846fc045be231e3737695ab96267
-
SSDEEP
12288:zbG4r0+7nOiWmjDFXg7QMLWN48w/OD7DkMR8S8d2LwEnMuaIg5ID7Fx6H6rl:zbGO0EZ5P4s48Ug7QMT8d6wMaIgeXFxp
Score
7/10
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Correspondencia_Digital.exe"C:\Users\Admin\AppData\Local\Temp\Correspondencia_Digital.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
1.5MB