Overview

overview

6

Static

static

006b21a096...4a.dll

windows7-x64

6

006b21a096...4a.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    006b21a09692257ec57568bc9aa6143210baf63ce7c8a15a5d1acd520c98b74a

  • Size

    76KB

  • Sample

    221003-n5n9kseef5

  • MD5

    6b34bd7ed8978bd1cb7719f33d2d1859

  • SHA1

    c8db8115a907cdfd03f35259b93a983851b427db

  • SHA256

    006b21a09692257ec57568bc9aa6143210baf63ce7c8a15a5d1acd520c98b74a

  • SHA512

    bfa2bebc98ef7ac5e30c2ec0fd11c3d9eb9ff0eb3a4f145441277528df04b2668e2b80bc31212321348d7d7e2efe1eb1b62894ab0c54cba327d37749260a7a24

  • SSDEEP

    1536:yWaMKDh2Z1yCevdbp9cjDD6iSFi1h4YAg6gMdYl90KPEmUk:V7KtUQ3dbPcjD2iSFiAYAg6gMdiPEc

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      006b21a09692257ec57568bc9aa6143210baf63ce7c8a15a5d1acd520c98b74a

    • Size

      76KB

    • MD5

      6b34bd7ed8978bd1cb7719f33d2d1859

    • SHA1

      c8db8115a907cdfd03f35259b93a983851b427db

    • SHA256

      006b21a09692257ec57568bc9aa6143210baf63ce7c8a15a5d1acd520c98b74a

    • SHA512

      bfa2bebc98ef7ac5e30c2ec0fd11c3d9eb9ff0eb3a4f145441277528df04b2668e2b80bc31212321348d7d7e2efe1eb1b62894ab0c54cba327d37749260a7a24

    • SSDEEP

      1536:yWaMKDh2Z1yCevdbp9cjDD6iSFi1h4YAg6gMdYl90KPEmUk:V7KtUQ3dbPcjD2iSFiAYAg6gMdiPEc

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks