Overview

overview

8

Static

static

8

00dcd88272...02.exe

windows7_x64

6

00dcd88272...02.exe

windows10-2004_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    00dcd88272a91076bf83e34a9fa52909ac2c35b5ac08b1429662eba583a1ac02

  • Size

    341KB

  • Sample

    220524-erv1jafdb8

  • MD5

    53ef9a8853f04cf2017c6905e241bc14

  • SHA1

    0937427a150fc7b3dcfa8954fd230f9112ac3d0a

  • SHA256

    00dcd88272a91076bf83e34a9fa52909ac2c35b5ac08b1429662eba583a1ac02

  • SHA512

    1ed7eba6bb7fbf6ae331c0293378fb553af93b51e8a60f83775c69492dc395b76294df58ae777b3be261f8025e35de311c24d0bb98a96d36e54e5c263f960da9

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      00dcd88272a91076bf83e34a9fa52909ac2c35b5ac08b1429662eba583a1ac02

    • Size

      341KB

    • MD5

      53ef9a8853f04cf2017c6905e241bc14

    • SHA1

      0937427a150fc7b3dcfa8954fd230f9112ac3d0a

    • SHA256

      00dcd88272a91076bf83e34a9fa52909ac2c35b5ac08b1429662eba583a1ac02

    • SHA512

      1ed7eba6bb7fbf6ae331c0293378fb553af93b51e8a60f83775c69492dc395b76294df58ae777b3be261f8025e35de311c24d0bb98a96d36e54e5c263f960da9

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks