General
-
Target
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd
-
Size
3.6MB
-
Sample
220520-fkgp1adfep
-
MD5
f7f54b4990122d9befde831905fd5955
-
SHA1
81622ef7179128f8f5f59ba21df8efdf56f902d2
-
SHA256
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd
-
SHA512
67d80ea11116a34ed3d5dbe2a6bda0a6f6932b18db5fcf9d57a6db1b6342a5de5bffa0d0b8e40b04d84d8c11c56ae0706ceddd1d248368af1f796f3e70232d1a
Static task
static1
Behavioral task
behavioral1
Sample
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd
-
Size
3.6MB
-
MD5
f7f54b4990122d9befde831905fd5955
-
SHA1
81622ef7179128f8f5f59ba21df8efdf56f902d2
-
SHA256
03568cf423fd658b3799b3cd687e4d537f3788bec138352c252434ef8fc041bd
-
SHA512
67d80ea11116a34ed3d5dbe2a6bda0a6f6932b18db5fcf9d57a6db1b6342a5de5bffa0d0b8e40b04d84d8c11c56ae0706ceddd1d248368af1f796f3e70232d1a
Score8/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-