c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a | Triage

Sharing

General

Target

c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
Size

1.6MB
Sample

230922-fejbmsdb3z
MD5

794f01fb4b17dbde63908cc076f67096
SHA1

039b079cf3420ae70156fbd2db2da3d8f2a95528
SHA256

c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
SHA512

dbd0c0911f35b30746c25c46fede6ee07bb2272c69c6d0d2b199b09d4fb3243bd90e2399295919cb9dee99867d25a7a1833716368c065039b720a346b7b520f2
SSDEEP

49152:uS21MxgPL6myGeQGe5PwXkz+9ujkDQ8kLPz6ZRre:fNx4JyzJybC9qk85Cj6

Score

7^/10

Malware Config

Targets

- Target
  
  c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
- Size
  
  1.6MB
- MD5
  
  794f01fb4b17dbde63908cc076f67096
- SHA1
  
  039b079cf3420ae70156fbd2db2da3d8f2a95528
- SHA256
  
  c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
- SHA512
  
  dbd0c0911f35b30746c25c46fede6ee07bb2272c69c6d0d2b199b09d4fb3243bd90e2399295919cb9dee99867d25a7a1833716368c065039b720a346b7b520f2
- SSDEEP
  
  49152:uS21MxgPL6myGeQGe5PwXkz+9ujkDQ8kLPz6ZRre:fNx4JyzJybC9qk85Cj6
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2