Overview

overview

8

Static

static

1c779a3a0d...57.exe

windows7-x64

8

1c779a3a0d...57.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c779a3a0d6cd47673dc930bed230bf1f8cb559e327451de6bc6d1865381ca57

  • Size

    633KB

  • Sample

    221004-g21pwafdc8

  • MD5

    348abcc8a1ee4d65e2f84de1fb6dc24a

  • SHA1

    9a4ba97562cddeda67c15e31708ba3110c56512b

  • SHA256

    1c779a3a0d6cd47673dc930bed230bf1f8cb559e327451de6bc6d1865381ca57

  • SHA512

    de74c5c00136b9b8bc396b4bfaadcc2045aba172d2191257b356594703787d3986e2ea0c3ff7a74aa30238fd8102a49b09ff081cf73643a38ce09177e622c522

  • SSDEEP

    12288:hKr6SBsPOqkWGhQDtGIYA3DugBIWDwLDFRB:IPYPkWGaDtjYkufLDFP

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      1c779a3a0d6cd47673dc930bed230bf1f8cb559e327451de6bc6d1865381ca57

    • Size

      633KB

    • MD5

      348abcc8a1ee4d65e2f84de1fb6dc24a

    • SHA1

      9a4ba97562cddeda67c15e31708ba3110c56512b

    • SHA256

      1c779a3a0d6cd47673dc930bed230bf1f8cb559e327451de6bc6d1865381ca57

    • SHA512

      de74c5c00136b9b8bc396b4bfaadcc2045aba172d2191257b356594703787d3986e2ea0c3ff7a74aa30238fd8102a49b09ff081cf73643a38ce09177e622c522

    • SSDEEP

      12288:hKr6SBsPOqkWGhQDtGIYA3DugBIWDwLDFRB:IPYPkWGaDtjYkufLDFP

    Score
    8/10
    bootkitpersistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks