Overview

overview

6

Static

static

8f94644c32...b0.exe

windows7_x64

6

8f94644c32...b0.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f94644c3292463229a39c1cff372b557f6571493b4c84fed8bce221cc1125b0

  • Size

    21KB

  • Sample

    220415-2rh3asfbd5

  • MD5

    4dfbad475b27a8a0efb1e9a7ef7970b2

  • SHA1

    547450bb3a828bc8ac65dc31d96636ef77c2b610

  • SHA256

    8f94644c3292463229a39c1cff372b557f6571493b4c84fed8bce221cc1125b0

  • SHA512

    6f98e8353cf7ca146816a9d8a2e3913f967df453a90323de81b9d1152bb59c0194ae21fe79059d8296bb5f16bbe18f027ae376b2574a9ce1edb3c108d05905a2

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      8f94644c3292463229a39c1cff372b557f6571493b4c84fed8bce221cc1125b0

    • Size

      21KB

    • MD5

      4dfbad475b27a8a0efb1e9a7ef7970b2

    • SHA1

      547450bb3a828bc8ac65dc31d96636ef77c2b610

    • SHA256

      8f94644c3292463229a39c1cff372b557f6571493b4c84fed8bce221cc1125b0

    • SHA512

      6f98e8353cf7ca146816a9d8a2e3913f967df453a90323de81b9d1152bb59c0194ae21fe79059d8296bb5f16bbe18f027ae376b2574a9ce1edb3c108d05905a2

    Score
    6/10
    bootkitpersistence

    • Program crash

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks