General
-
Target
trashclean[1].exe
-
Size
385KB
-
Sample
220517-jvawzsbfgr
-
MD5
8b5143e30d303c304dfbf65114d174c2
-
SHA1
abaa1475c382dea8e5a119521d349ec9b35aeb0d
-
SHA256
3b4790a6e88118225be52b2666a2c213053e25edbcc151c166e1d0dc5a11cbda
-
SHA512
c0855a2d13911ff2fff4993f45d37fdbc69fe7ede07086b950a5cd9bd3f1a7b99c97c9e2674f4829df68a4b8e1d77c4af9f7a27084f3af25f52b8035562aedab
Static task
static1
Behavioral task
behavioral1
Sample
trashclean[1].exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
trashclean[1].exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
trashclean[1].exe
-
Size
385KB
-
MD5
8b5143e30d303c304dfbf65114d174c2
-
SHA1
abaa1475c382dea8e5a119521d349ec9b35aeb0d
-
SHA256
3b4790a6e88118225be52b2666a2c213053e25edbcc151c166e1d0dc5a11cbda
-
SHA512
c0855a2d13911ff2fff4993f45d37fdbc69fe7ede07086b950a5cd9bd3f1a7b99c97c9e2674f4829df68a4b8e1d77c4af9f7a27084f3af25f52b8035562aedab
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-