Overview

overview

8

Static

static

355a823818...7f.exe

windows7_x64

8

355a823818...7f.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    355a82381820bc26adf5b6612ca75b8b336d131b53c5d408c206f4008fdeb97f

  • Size

    3.6MB

  • Sample

    220516-fyv5jshahn

  • MD5

    6bbb41180189698e7f78c04021e65f9f

  • SHA1

    ec632ad571e156c1c49fad183f88a2bd4c97ce3d

  • SHA256

    355a82381820bc26adf5b6612ca75b8b336d131b53c5d408c206f4008fdeb97f

  • SHA512

    bf8f75422f2aa26f27bc43b6f017047309a930e932eb235372e0d1f717c9183b340452b32b915442b7de8127589bfdaab4f6479ab4c610560afc3d673385fc7b

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      355a82381820bc26adf5b6612ca75b8b336d131b53c5d408c206f4008fdeb97f

    • Size

      3.6MB

    • MD5

      6bbb41180189698e7f78c04021e65f9f

    • SHA1

      ec632ad571e156c1c49fad183f88a2bd4c97ce3d

    • SHA256

      355a82381820bc26adf5b6612ca75b8b336d131b53c5d408c206f4008fdeb97f

    • SHA512

      bf8f75422f2aa26f27bc43b6f017047309a930e932eb235372e0d1f717c9183b340452b32b915442b7de8127589bfdaab4f6479ab4c610560afc3d673385fc7b

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Bootkit

1
T1067

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks