Overview

overview

6

Static

static

KInstallTool.exe

windows7_x64

6

KInstallTool.exe

windows10_x64

6

Resubmissions

29-07-2021 12:22

210729-9c739yrckx 10

27-07-2021 04:17

210727-dlhj2e4q6a 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    KInstallTool.exe

  • Size

    1.8MB

  • Sample

    210727-dlhj2e4q6a

  • MD5

    763d17d713bc627fc91dac155b531590

  • SHA1

    08540b1812c891618dc5aa2597c57ff18deaab6a

  • SHA256

    8bc74eec04dbe27c2facf483b55c5b9c2c862e5a5bbf76013523fc23f36abb0d

  • SHA512

    854fcbfa9de1a5ac70f40c9ed131b3bf4e5b07fa6f9f2d07c8881f5ecf86e7c0c482667bd696de1dcf2b5ef469ff53f95ce80823723f18956ffdaee3eb21dbc2

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      KInstallTool.exe

    • Size

      1.8MB

    • MD5

      763d17d713bc627fc91dac155b531590

    • SHA1

      08540b1812c891618dc5aa2597c57ff18deaab6a

    • SHA256

      8bc74eec04dbe27c2facf483b55c5b9c2c862e5a5bbf76013523fc23f36abb0d

    • SHA512

      854fcbfa9de1a5ac70f40c9ed131b3bf4e5b07fa6f9f2d07c8881f5ecf86e7c0c482667bd696de1dcf2b5ef469ff53f95ce80823723f18956ffdaee3eb21dbc2

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks