Analysis
-
max time kernel
92s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12/10/2024, 02:31
General
-
Target
7ddf2d75adf7bdaec6c21ab91aeebf7fafe396deb4c89dd1bc296a8c12256a5fN.exe
-
Size
736KB
-
MD5
26a6e1f7ab836ad4237cb948bb3832b0
-
SHA1
d23af57537de2a7b4d4d9d5b25408c467a88fef6
-
SHA256
7ddf2d75adf7bdaec6c21ab91aeebf7fafe396deb4c89dd1bc296a8c12256a5f
-
SHA512
664d60e59ddad89e7020ffc6bd369f296f14abad0c8cc4f634e06121fb77e033b1096e2392199ebc7ab6b034986edb0e3c96dbe0113c624f842026e1f72db2de
-
SSDEEP
12288:yTWZtuNsyULBw7JLlpMSe0t/LPavPBhXwsNdCbPV0IwAG1LaKO:0sZtw7ll7t/QKqdCjVZG1+KO
Malware Config
Signatures
-
Identifies Wine through registry keys 2 TTPs 1 IoCs
Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ddf2d75adf7bdaec6c21ab91aeebf7fafe396deb4c89dd1bc296a8c12256a5fN.exe"C:\Users\Admin\AppData\Local\Temp\7ddf2d75adf7bdaec6c21ab91aeebf7fafe396deb4c89dd1bc296a8c12256a5fN.exe"1⤵
- Identifies Wine through registry keys
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
728KB
-
Filesize
728KB