Overview

overview

8

Static

static

8

lianzhanst.exe

windows7_x64

6

lianzhanst.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    lianzhanst.exe

  • Size

    3.6MB

  • Sample

    220522-f9hzcsbdeq

  • MD5

    96e4d115b0edc2d77fb7b447e11fda39

  • SHA1

    b3ddf70a0c29b9ab5163702ae420717f39a3e2a4

  • SHA256

    e5975f25c103fae9d95d4652ec3b9e4c479d445d61c88f08354835b85e4b7546

  • SHA512

    beb44f9d0fdcf281513dc8776a6253d97096ea61c847158cc99eade7b083fcd47c5e91f6d20fb75d2d1cd6e0df10ccd50c281f2d343824f726571a6f2dda3723

Score
8/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      lianzhanst.exe

    • Size

      3.6MB

    • MD5

      96e4d115b0edc2d77fb7b447e11fda39

    • SHA1

      b3ddf70a0c29b9ab5163702ae420717f39a3e2a4

    • SHA256

      e5975f25c103fae9d95d4652ec3b9e4c479d445d61c88f08354835b85e4b7546

    • SHA512

      beb44f9d0fdcf281513dc8776a6253d97096ea61c847158cc99eade7b083fcd47c5e91f6d20fb75d2d1cd6e0df10ccd50c281f2d343824f726571a6f2dda3723

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks