Overview

overview

8

Static

static

d12eb8bc90...90.exe

windows7_x64

8

d12eb8bc90...90.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d12eb8bc900f84664934794520ef0d0b3e39c3c5631825143b07175f54486490

  • Size

    956KB

  • Sample

    220516-gefq7afch4

  • MD5

    c1c176ae397edeb937bea3bed509c1b6

  • SHA1

    fe93562e6584548a44ee7f0b9e61b01a9e9d4def

  • SHA256

    d12eb8bc900f84664934794520ef0d0b3e39c3c5631825143b07175f54486490

  • SHA512

    726ec5ebf7df8ff7bcf3f10400aa2a3eab1efc26dbc6636c4db8f82c42f3a616e5c7ac8d40e60b2284c5467822193fa575f7fdb86714b1aa111172221ecf6a39

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      d12eb8bc900f84664934794520ef0d0b3e39c3c5631825143b07175f54486490

    • Size

      956KB

    • MD5

      c1c176ae397edeb937bea3bed509c1b6

    • SHA1

      fe93562e6584548a44ee7f0b9e61b01a9e9d4def

    • SHA256

      d12eb8bc900f84664934794520ef0d0b3e39c3c5631825143b07175f54486490

    • SHA512

      726ec5ebf7df8ff7bcf3f10400aa2a3eab1efc26dbc6636c4db8f82c42f3a616e5c7ac8d40e60b2284c5467822193fa575f7fdb86714b1aa111172221ecf6a39

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks