Overview

overview

8

Static

static

8

tmp.exe

windows7_x64

6

tmp.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    1.3MB

  • Sample

    220522-ltlcfahfa8

  • MD5

    756e9a919f3263313d2aa615fa2c4e07

  • SHA1

    ab4587aaeebe307416adf32ca542d4ee61465ca1

  • SHA256

    c6f683d875c4d7b463750391aa68524d517400900da8317069de4f7ac6a703b0

  • SHA512

    3a3896b833bdcb084a1a0c0d9777ebb0b7cd34fe6b89ef1c17f37ace011b26e972d4132edc1b48f91abbc3d3892db4616fd788f8434b0ffa921ceb4664bd4881

Score
8/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      tmp

    • Size

      1.3MB

    • MD5

      756e9a919f3263313d2aa615fa2c4e07

    • SHA1

      ab4587aaeebe307416adf32ca542d4ee61465ca1

    • SHA256

      c6f683d875c4d7b463750391aa68524d517400900da8317069de4f7ac6a703b0

    • SHA512

      3a3896b833bdcb084a1a0c0d9777ebb0b7cd34fe6b89ef1c17f37ace011b26e972d4132edc1b48f91abbc3d3892db4616fd788f8434b0ffa921ceb4664bd4881

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks