Overview

overview

8

Static

static

8

1495a59a23...5b.exe

windows7_x64

8

1495a59a23...5b.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    1495a59a2300245b0c8cfdfe2e467de7f79a4d287e10e9119a96cdac0a1b7c5b
  • Size 2.6MB
  • Sample201109-avkylrqpfe
  • SHA256 1495a59a2300245b0c8cfdfe2e467de7f79a4d287e10e9119a96cdac0a1b7c5b
  • MD5 SHA1 SHA512
Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target
      1495a59a2300245b0c8cfdfe2e467de7f79a4d287e10e9119a96cdac0a1b7c5b
    • Size 2.6MB
    • SHA256 1495a59a2300245b0c8cfdfe2e467de7f79a4d287e10e9119a96cdac0a1b7c5b
    • MD5 SHA1 SHA512
    Score
    8/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks