Overview

overview

8

Static

static

daa617feb8...42.exe

windows7_x64

8

daa617feb8...42.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    daa617feb892ad4f794401b91e0b0f6e09522b7eeec94504844da313f6ccf042

  • Size

    956KB

  • Sample

    220524-tj2wfaghh4

  • MD5

    f79132562e29883e95fe358912d747bd

  • SHA1

    8c7044ca6cd59e051cc7ac21b54a697dd9b503a6

  • SHA256

    daa617feb892ad4f794401b91e0b0f6e09522b7eeec94504844da313f6ccf042

  • SHA512

    dd7ed92834e6b16ce7af6384a4d467716ef57f122d5d5d7db1bd5d087aab29dd0063edcd83308f81866d062232f53760ca51990e211933d27bcf2fff66f52515

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      daa617feb892ad4f794401b91e0b0f6e09522b7eeec94504844da313f6ccf042

    • Size

      956KB

    • MD5

      f79132562e29883e95fe358912d747bd

    • SHA1

      8c7044ca6cd59e051cc7ac21b54a697dd9b503a6

    • SHA256

      daa617feb892ad4f794401b91e0b0f6e09522b7eeec94504844da313f6ccf042

    • SHA512

      dd7ed92834e6b16ce7af6384a4d467716ef57f122d5d5d7db1bd5d087aab29dd0063edcd83308f81866d062232f53760ca51990e211933d27bcf2fff66f52515

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks