Overview

overview

8

Static

static

616fdb2889...f2.exe

windows7_x64

8

616fdb2889...f2.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2

  • Size

    956KB

  • Sample

    220524-1qv5ssdbfl

  • MD5

    d6e0738dd82aad7e9a69c82d90222c99

  • SHA1

    f95d5104308894c9e687a1bc19f2f4306493afdd

  • SHA256

    616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2

  • SHA512

    734e286fe3fa419d45d5fdbc10d80eebaf9c80fdfefe5b917eb5f162ef3551b7b0ec4702fef86505845fec3af4adae2da57cd9c3ec208532a323cbdb885586da

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2

    • Size

      956KB

    • MD5

      d6e0738dd82aad7e9a69c82d90222c99

    • SHA1

      f95d5104308894c9e687a1bc19f2f4306493afdd

    • SHA256

      616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2

    • SHA512

      734e286fe3fa419d45d5fdbc10d80eebaf9c80fdfefe5b917eb5f162ef3551b7b0ec4702fef86505845fec3af4adae2da57cd9c3ec208532a323cbdb885586da

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks