0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
22/07/2026, 14:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3.exe
Size 12.7MB
Sample260722-r211rafh42
SHA256 0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3
MD5 6b4e8ea3697c04e44a34e922dfc02dae
SHA1 8c7815e2ea92c46aa2368af2394f05da01c62943
SHA512 40d34ce2e18cddc3b90415ab83640461e3e69da3166fffd1ccdb04eef56ae25b00970492cd5b2f21ac87c623004be5a37c21563801a9e8346b6e83bc973f7942
SSDEEP 196608:Boxk9Ae3B/zWmUoXQeKDAGJYyk6KZttAtYn/ZGyvfF:epex/zWmUbL/dJctt6Yn/ZGyXF
TLSH
T184D69CE621D692FDC423C47A8603EA6BCAAF703A0736C6D3509096175E27CD17E3AF15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3.exe

C:\Users\Admin\AppData\Local\Temp\0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3.exe
"C:\Users\Admin\AppData\Local\Temp\0f08c77cf2c728fe7bd7848d7adc102798653635219fb670e56748bbe25a27c3.exe"
1⤵
- Checks BIOS information in registry
PID:3536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3536-0-0x0000000140000000-0x0000000140CB8000-memory.dmp

Download

memory/3536-2-0x0000000140000000-0x0000000140CB8000-memory.dmp