0fef0fe689f2bd7820f26ac0b6237dd33406ba595333c6a8d5358be3afe1c85a | Triage

Sharing

General

Target

0fef0fe689f2bd7820f26ac0b6237dd33406ba595333c6a8d5358be3afe1c85a
Size

3.5MB
Sample

240701-e8ckhswfpe
MD5

71e2a096523b5207a2a84502b9ab80f7
SHA1

097718e776342ac7745fc0bb1fc69ca649fce257
SHA256

0fef0fe689f2bd7820f26ac0b6237dd33406ba595333c6a8d5358be3afe1c85a
SHA512

21122a36189300b513f99a87305e583a58ecdaa356d205e4539f9561e7ce19a9b5fbbb914380bba39a37ecccdb34df8cf745718c205587549f03c012aff746b6
SSDEEP

49152:InIVKknSD9bsFVWFuv5vaLgqaLPDu00HpCR3FhbDd8tqdfftgD/DAeLyqCZo4Jwa:5VKYSD+FVBv3tHujaPbxRdff4cucL

Score

7^/10

Malware Config

Targets

- Target
  
  0fef0fe689f2bd7820f26ac0b6237dd33406ba595333c6a8d5358be3afe1c85a
- Size
  
  3.5MB
- MD5
  
  71e2a096523b5207a2a84502b9ab80f7
- SHA1
  
  097718e776342ac7745fc0bb1fc69ca649fce257
- SHA256
  
  0fef0fe689f2bd7820f26ac0b6237dd33406ba595333c6a8d5358be3afe1c85a
- SHA512
  
  21122a36189300b513f99a87305e583a58ecdaa356d205e4539f9561e7ce19a9b5fbbb914380bba39a37ecccdb34df8cf745718c205587549f03c012aff746b6
- SSDEEP
  
  49152:InIVKknSD9bsFVWFuv5vaLgqaLPDu00HpCR3FhbDd8tqdfftgD/DAeLyqCZo4Jwa:5VKYSD+FVBv3tHujaPbxRdff4cucL
Score

7^/10
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2