Overview

overview

8

Static

static

8cada52737...a9.exe

windows7_x64

8cada52737...a9.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cada527372c8a1699f35cfd9c4efc8893d0be5f2e26e7519dce17c98b5e37a9

  • Size

    10KB

  • Sample

    220524-2hf7caecej

  • MD5

    6a374f5c80594bd2696965881866c49c

  • SHA1

    ddde5d34985844974cc408f637c4ac53258148e3

  • SHA256

    8cada527372c8a1699f35cfd9c4efc8893d0be5f2e26e7519dce17c98b5e37a9

  • SHA512

    23e71a102a2e064d3be78a3ed56bc853e4345f004dcf88b055bc97e80fddf9fd8a1f348a5c024272dfaee157cf24fb888214a34763fb03cda33829d6cfdc75f2

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      8cada527372c8a1699f35cfd9c4efc8893d0be5f2e26e7519dce17c98b5e37a9

    • Size

      10KB

    • MD5

      6a374f5c80594bd2696965881866c49c

    • SHA1

      ddde5d34985844974cc408f637c4ac53258148e3

    • SHA256

      8cada527372c8a1699f35cfd9c4efc8893d0be5f2e26e7519dce17c98b5e37a9

    • SHA512

      23e71a102a2e064d3be78a3ed56bc853e4345f004dcf88b055bc97e80fddf9fd8a1f348a5c024272dfaee157cf24fb888214a34763fb03cda33829d6cfdc75f2

    Score
    8/10
    bootkitpersistence

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks