Overview

overview

10

Static

static

a5f8319e23...49.exe

windows7_x64

1

a5f8319e23...49.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5f8319e230bf2cbe2be5406e42072cbae69086979232912bc49feaea56d5c49

  • Size

    1.6MB

  • Sample

    220524-w2l9taghhm

  • MD5

    5b305ebf70fa30b9fa99dfb27ff07f60

  • SHA1

    54711aca678363e5af1674a158edb7fffc26a985

  • SHA256

    a5f8319e230bf2cbe2be5406e42072cbae69086979232912bc49feaea56d5c49

  • SHA512

    643ccb1d5ef37c4acb0cf658a457a0c2b9a0697dd744c1c94ece6ba6008c5487b831d55ad6f50c6801f42d8c358b7ef39ef51e0e32472e1144c92fedff5ffcce

Score
10/10
bootkitpersistencesuricata

Malware Config

Targets

    • Target

      a5f8319e230bf2cbe2be5406e42072cbae69086979232912bc49feaea56d5c49

    • Size

      1.6MB

    • MD5

      5b305ebf70fa30b9fa99dfb27ff07f60

    • SHA1

      54711aca678363e5af1674a158edb7fffc26a985

    • SHA256

      a5f8319e230bf2cbe2be5406e42072cbae69086979232912bc49feaea56d5c49

    • SHA512

      643ccb1d5ef37c4acb0cf658a457a0c2b9a0697dd744c1c94ece6ba6008c5487b831d55ad6f50c6801f42d8c358b7ef39ef51e0e32472e1144c92fedff5ffcce

    Score
    10/10
    bootkitpersistencesuricata

    • suricata: ET MALWARE Possible Windows executable sent when remote host claims to send a Text File

      suricata: ET MALWARE Possible Windows executable sent when remote host claims to send a Text File

      suricata

    • Downloads MZ/PE file

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks