Overview

overview

8

Static

static

90ea135bb4...b5.exe

windows7-x64

8

90ea135bb4...b5.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    90ea135bb419a1d993fd08be9b8450c26bd68b9f198d4a6edd3b41bd5ff012b5

  • Size

    6.4MB

  • Sample

    221002-ypwc3aaafl

  • MD5

    36dca1e97b12cbd5de66cf09bd902b14

  • SHA1

    e5cbb8f863856b636f3d781ec5b57a8a06c1201d

  • SHA256

    90ea135bb419a1d993fd08be9b8450c26bd68b9f198d4a6edd3b41bd5ff012b5

  • SHA512

    8065b1f0d839c90137ee2f1f0c485b115a3f9c24fd2285503783717be7871a535eec125dfe3c830f631b13f07856c8a6a052762e14b74517896be0e6b123e621

  • SSDEEP

    196608:Hs+W7spi5U12ehtNRmEppT/3PSZ/EXt+k5+86yCtfjZYIzJ:MHi0aRmEP/3PSZMYuIyOfVL

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      90ea135bb419a1d993fd08be9b8450c26bd68b9f198d4a6edd3b41bd5ff012b5

    • Size

      6.4MB

    • MD5

      36dca1e97b12cbd5de66cf09bd902b14

    • SHA1

      e5cbb8f863856b636f3d781ec5b57a8a06c1201d

    • SHA256

      90ea135bb419a1d993fd08be9b8450c26bd68b9f198d4a6edd3b41bd5ff012b5

    • SHA512

      8065b1f0d839c90137ee2f1f0c485b115a3f9c24fd2285503783717be7871a535eec125dfe3c830f631b13f07856c8a6a052762e14b74517896be0e6b123e621

    • SSDEEP

      196608:Hs+W7spi5U12ehtNRmEppT/3PSZ/EXt+k5+86yCtfjZYIzJ:MHi0aRmEP/3PSZMYuIyOfVL

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks