Overview

overview

8

Static

static

8

00383e9ea8...c6.exe

windows7_x64

6

00383e9ea8...c6.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00383e9ea84d9410e22a2b42025a073b791257ae3e69ad22255515f6b3b6d2c6

  • Size

    328KB

  • Sample

    220516-zrad2shaa6

  • MD5

    5b828a1530415dc7724819dc54023a4d

  • SHA1

    9ed8f9e34e82584dd129eebf34a5bd356bf8bd61

  • SHA256

    00383e9ea84d9410e22a2b42025a073b791257ae3e69ad22255515f6b3b6d2c6

  • SHA512

    df513e5e72323d7a9f05f0848f7a55693ce1543cc1b0326529ec305cc1fc7e0f89e45bd96273900bcd8a4991193f1564eec4275d145352291fc9ef6a5e53745c

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      00383e9ea84d9410e22a2b42025a073b791257ae3e69ad22255515f6b3b6d2c6

    • Size

      328KB

    • MD5

      5b828a1530415dc7724819dc54023a4d

    • SHA1

      9ed8f9e34e82584dd129eebf34a5bd356bf8bd61

    • SHA256

      00383e9ea84d9410e22a2b42025a073b791257ae3e69ad22255515f6b3b6d2c6

    • SHA512

      df513e5e72323d7a9f05f0848f7a55693ce1543cc1b0326529ec305cc1fc7e0f89e45bd96273900bcd8a4991193f1564eec4275d145352291fc9ef6a5e53745c

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks