Overview

overview

8

Static

static

8

298d3f1b9c...f6.exe

windows7-x64

8

298d3f1b9c...f6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    298d3f1b9ca24f0e8d0a182cddc3ecf6

  • Size

    43KB

  • Sample

    220920-vm8zlaead3

  • MD5

    298d3f1b9ca24f0e8d0a182cddc3ecf6

  • SHA1

    0b5cd8473ea09eaf04247cae1651c1e00c286027

  • SHA256

    4a01f844792c024bdc212aae22f9545812f8bee395266231ded488726f0dd18a

  • SHA512

    bb01f4e6ce60898959251610c9b62578519f6427ddaab98cc33b01bef05d3ba79853f0efc2a6a42ef8c0ceeb49b1f54670e94a135ad0df151f5569ba8742becd

  • SSDEEP

    768:OpO0vDLbHiiHMnPP2TB5qqIot3zcxn4LfNlRALRRXmXHf:0nbVMP+TB8qh3zOnMfNQvXmXHf

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      298d3f1b9ca24f0e8d0a182cddc3ecf6

    • Size

      43KB

    • MD5

      298d3f1b9ca24f0e8d0a182cddc3ecf6

    • SHA1

      0b5cd8473ea09eaf04247cae1651c1e00c286027

    • SHA256

      4a01f844792c024bdc212aae22f9545812f8bee395266231ded488726f0dd18a

    • SHA512

      bb01f4e6ce60898959251610c9b62578519f6427ddaab98cc33b01bef05d3ba79853f0efc2a6a42ef8c0ceeb49b1f54670e94a135ad0df151f5569ba8742becd

    • SSDEEP

      768:OpO0vDLbHiiHMnPP2TB5qqIot3zcxn4LfNlRALRRXmXHf:0nbVMP+TB8qh3zOnMfNQvXmXHf

    Score
    8/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks