Overview

overview

8

Static

static

8

017a6c45e5...ea.exe

windows7_x64

6

017a6c45e5...ea.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    017a6c45e57990adaf639b73207d0a90282295ccc8468c9c3a25f3e0623dceea

  • Size

    338KB

  • Sample

    220523-x9me8agdep

  • MD5

    0bb0753a359f57725bfba965b4df2fb9

  • SHA1

    9f66340be17a5d081e5207784a76ea42591fdee8

  • SHA256

    017a6c45e57990adaf639b73207d0a90282295ccc8468c9c3a25f3e0623dceea

  • SHA512

    4414e1d287e1fbe47c8391aa0f30b755d1e6730b4fad90320d47d41fda161eed8d17b76bbb87a559634de2d05caabeb516660b0cc39e7f6038b570c0d827fe16

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      017a6c45e57990adaf639b73207d0a90282295ccc8468c9c3a25f3e0623dceea

    • Size

      338KB

    • MD5

      0bb0753a359f57725bfba965b4df2fb9

    • SHA1

      9f66340be17a5d081e5207784a76ea42591fdee8

    • SHA256

      017a6c45e57990adaf639b73207d0a90282295ccc8468c9c3a25f3e0623dceea

    • SHA512

      4414e1d287e1fbe47c8391aa0f30b755d1e6730b4fad90320d47d41fda161eed8d17b76bbb87a559634de2d05caabeb516660b0cc39e7f6038b570c0d827fe16

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks