Overview

overview

8

Static

static

8

00f8b1788e...75.exe

windows7_x64

6

00f8b1788e...75.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00f8b1788e3668bd566b4a9c34f8920635067a8b0a2c4524819ecdfd3fae5d75

  • Size

    207KB

  • Sample

    220524-dsa63sdgd4

  • MD5

    d1d5f90a891cd65437e80f5646fab0b2

  • SHA1

    0ce93f5ba0ada20b30fb79556cf780aaf0b0ff0b

  • SHA256

    00f8b1788e3668bd566b4a9c34f8920635067a8b0a2c4524819ecdfd3fae5d75

  • SHA512

    ad223289ae5ae68260257f9549e30b57d5d76f27cfa424b5cd84d0e282ec2540022fd5931f7b6ef1af03786c4f2d1142032302aa6ed20c5b1e403626b7cd288b

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      00f8b1788e3668bd566b4a9c34f8920635067a8b0a2c4524819ecdfd3fae5d75

    • Size

      207KB

    • MD5

      d1d5f90a891cd65437e80f5646fab0b2

    • SHA1

      0ce93f5ba0ada20b30fb79556cf780aaf0b0ff0b

    • SHA256

      00f8b1788e3668bd566b4a9c34f8920635067a8b0a2c4524819ecdfd3fae5d75

    • SHA512

      ad223289ae5ae68260257f9549e30b57d5d76f27cfa424b5cd84d0e282ec2540022fd5931f7b6ef1af03786c4f2d1142032302aa6ed20c5b1e403626b7cd288b

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks