34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2022, 19:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3.exe
Size

938KB
MD5

7b074ece254b77a1c884c8eeba1fa7b0
SHA1

b1914c5b07078a209e8340f36b0864faaf39f979
SHA256

34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3
SHA512

25db227a5d6b4cf7a93402e9d38eabf97d791e5247c392c496159d8ca377ed8918dab4efdf4d17c4186d289f764873166615bec701434c1ab868a66bc7d29519
SSDEEP

12288:abvnf8UaJEjEKUBKuJyECjDW76LS/Uc7xX0gmbKgPdr/uduQXqOFuzsj5uJZv355:WvoTKUsEyEyK+LS3g9KXqKtu73aBi

Score

7^/10

Malware Config

Signatures

Checks BIOS information in registry 2 TTPs 1 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3.exe

C:\Users\Admin\AppData\Local\Temp\34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3.exe
"C:\Users\Admin\AppData\Local\Temp\34d4087e4fcac143c9241098c47d6bfe33ea284732bf22b965e8b1e28ba880b3.exe"
1⤵
- Checks BIOS information in registry
PID:2328

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2328-132-0x0000000000400000-0x000000000068F000-memory.dmp

Filesize
2.6MB

Download