Overview

overview

7

Static

static

3

3046a9d268...76.exe

windows7-x64

7

3046a9d268...76.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176

  • Size

    2.6MB

  • Sample

    240701-e2gkwszark

  • MD5

    f63e080e77fede5afc7772dd98fd6325

  • SHA1

    4b131be624462df4a307ee77cf08a781581fa1fe

  • SHA256

    3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176

  • SHA512

    6f1fbf16e17a5725e5f43ac32fd53bac8c9b0ecdf156e1e8d8a476d9e03e0f90aa9fe6c8349f4346ff51a038f84d7f54ed6f6b52b0a1cf032132974a907f748d

  • SSDEEP

    49152:yC2iQ72kECAgYkhAePJDSlTZonpkJc+ALvM4pGKarLVtG9:N2ickCeOR+ALvlpUVtK

Score
7/10
evasion

Malware Config

Targets

    • Target

      3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176

    • Size

      2.6MB

    • MD5

      f63e080e77fede5afc7772dd98fd6325

    • SHA1

      4b131be624462df4a307ee77cf08a781581fa1fe

    • SHA256

      3046a9d268364ab7b3d392390adad72f8d5f68d2148329230582e21baf55d176

    • SHA512

      6f1fbf16e17a5725e5f43ac32fd53bac8c9b0ecdf156e1e8d8a476d9e03e0f90aa9fe6c8349f4346ff51a038f84d7f54ed6f6b52b0a1cf032132974a907f748d

    • SSDEEP

      49152:yC2iQ72kECAgYkhAePJDSlTZonpkJc+ALvM4pGKarLVtG9:N2ickCeOR+ALvlpUVtK

    Score
    7/10
    evasion

    • Identifies Wine through registry keys

      Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

      evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Credential Access

Discovery

Query Registry

1
T1012

Virtualization/Sandbox Evasion

1
T1497

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks