Overview

overview

8

Static

static

8

007d82ae89...c7.exe

windows7_x64

6

007d82ae89...c7.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    007d82ae89b86f7aef2fa2413b06dd1de7887b6d35ecb9436a14acc6ce3d9fc7

  • Size

    327KB

  • Sample

    220516-yar24agfcn

  • MD5

    4719591f3633687e84f821a81ebccde8

  • SHA1

    ad7631707b0430337d8d6e80281099d30bd485ff

  • SHA256

    007d82ae89b86f7aef2fa2413b06dd1de7887b6d35ecb9436a14acc6ce3d9fc7

  • SHA512

    f9ef2745cdca0d19c3ee4f865b53617453d206358e28e5b4a1de23ae5b053d81c1d712447889377bfdd101bc497d1b8c1691393a95918195fd70e1a5d96a0d94

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      007d82ae89b86f7aef2fa2413b06dd1de7887b6d35ecb9436a14acc6ce3d9fc7

    • Size

      327KB

    • MD5

      4719591f3633687e84f821a81ebccde8

    • SHA1

      ad7631707b0430337d8d6e80281099d30bd485ff

    • SHA256

      007d82ae89b86f7aef2fa2413b06dd1de7887b6d35ecb9436a14acc6ce3d9fc7

    • SHA512

      f9ef2745cdca0d19c3ee4f865b53617453d206358e28e5b4a1de23ae5b053d81c1d712447889377bfdd101bc497d1b8c1691393a95918195fd70e1a5d96a0d94

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks