2fd7b59954a9737b9083381aaec5c076314e92c8e621571b488561a60db8922d | Triage

Sharing

General

Target

2fd7b59954a9737b9083381aaec5c076314e92c8e621571b488561a60db8922d
Size

3.4MB
Sample

231012-3wagdsfd5t
MD5

71aad47781f0abed246a043ae564ec6e
SHA1

ca8ff29334a54a97d690d937b25719c0d746b64a
SHA256

2fd7b59954a9737b9083381aaec5c076314e92c8e621571b488561a60db8922d
SHA512

4989819dd503e7e466aa2c604b8eefc2d99c7358cb56c84afa3d5a283c57668ad24a7156bf620d34a844398a4e8a1ea4e2140f2a97eaddf565d5c39ea3e68ef3
SSDEEP

49152:Rv6WRrmmnxz/cuoHMZJJy4kxj0ZUXBYK9KGWtuDWWE0y90FUIum:ptPpG2byHxj0a9LW3WE0y9l8

Score

7^/10

Malware Config

Targets

- Target
  
  2fd7b59954a9737b9083381aaec5c076314e92c8e621571b488561a60db8922d
- Size
  
  3.4MB
- MD5
  
  71aad47781f0abed246a043ae564ec6e
- SHA1
  
  ca8ff29334a54a97d690d937b25719c0d746b64a
- SHA256
  
  2fd7b59954a9737b9083381aaec5c076314e92c8e621571b488561a60db8922d
- SHA512
  
  4989819dd503e7e466aa2c604b8eefc2d99c7358cb56c84afa3d5a283c57668ad24a7156bf620d34a844398a4e8a1ea4e2140f2a97eaddf565d5c39ea3e68ef3
- SSDEEP
  
  49152:Rv6WRrmmnxz/cuoHMZJJy4kxj0ZUXBYK9KGWtuDWWE0y90FUIum:ptPpG2byHxj0a9LW3WE0y9l8
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2