General

  • Target
    test.zip
  • Size 3.9MB
  • Sample260809-tj19xahp41
  • SHA256 82d2002c641ed9e9cd43641a3abc34df4c9cd6a683cc2e6fb03a840c5d96cd3e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      test/osu!install.exe
    • Size 4.3MB
    • SHA256 6e182c10d1813209d12753dbc70b3a5bba00fef4ecf64bc42051870e6dfe4b7d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      test/osussist-12-01-2025.zip
    • Size 1.7MB
    • SHA256 8c35bd8bedc6078c2fed2d96e948291a09c41decf7fdc06c8717abeeec4b7a98
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks