Overview

overview

7

Static

static

0442d1207f...3a.exe

windows7-x64

7

0442d1207f...3a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0442d1207f7e64beed3b3ebe8e924f470021c66137f37c5a63a9631f7913043a

  • Size

    2.6MB

  • Sample

    221003-cxmj8sdhap

  • MD5

    08fbdd5a8313912849157caa9aadb5a3

  • SHA1

    efde38e5ccc7c1e9d0005246ca06b8e8048da97e

  • SHA256

    0442d1207f7e64beed3b3ebe8e924f470021c66137f37c5a63a9631f7913043a

  • SHA512

    681c00f6640c6905385fded798dd24655587a98c761e99dd173c0dee89e2593fdc73c8675a55c5abdea1379cf349bf418de84089c32a2e316074cd173f5caf5a

  • SSDEEP

    24576:uYsz2J48lMjIh5XRyc7eGoYzPN/nm8VysAls5xPEvZqIq9I/7+b07K+GkJOeBQWF:umiGlAZvZqIQ0KSKEtG7YvdOa/

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      0442d1207f7e64beed3b3ebe8e924f470021c66137f37c5a63a9631f7913043a

    • Size

      2.6MB

    • MD5

      08fbdd5a8313912849157caa9aadb5a3

    • SHA1

      efde38e5ccc7c1e9d0005246ca06b8e8048da97e

    • SHA256

      0442d1207f7e64beed3b3ebe8e924f470021c66137f37c5a63a9631f7913043a

    • SHA512

      681c00f6640c6905385fded798dd24655587a98c761e99dd173c0dee89e2593fdc73c8675a55c5abdea1379cf349bf418de84089c32a2e316074cd173f5caf5a

    • SSDEEP

      24576:uYsz2J48lMjIh5XRyc7eGoYzPN/nm8VysAls5xPEvZqIq9I/7+b07K+GkJOeBQWF:umiGlAZvZqIQ0KSKEtG7YvdOa/

    Score
    7/10
    bootkitpersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks