Overview

overview

8

Static

static

8

3d99609d29...13.exe

windows7-x64

8

3d99609d29...13.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    3d99609d29ff105fb98e742e269ff7ba4bc660c3378ea261eada1ecb62c56913

  • Size

    43KB

  • Sample

    221021-cedvdafgd5

  • MD5

    48e8f2d02325efc478077b9c36eea2c7

  • SHA1

    a6e42979450ee8864d2e278677e72afe79eed705

  • SHA256

    3d99609d29ff105fb98e742e269ff7ba4bc660c3378ea261eada1ecb62c56913

  • SHA512

    f4e92864f04d56852731ba91d640ce2ef30dc8e5ed327e43e4b5d25f4f0d06cc07caf82eb86ee281fe852db2492d519df9f1418659df82a44b8d1dc6f786c873

  • SSDEEP

    768:yM8E/YC30zLP70lgrL9HI/ONvRCQ7UdBuOCUgNXmXHN:NYC38bgg9GQ7+CU4XmXHN

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      3d99609d29ff105fb98e742e269ff7ba4bc660c3378ea261eada1ecb62c56913

    • Size

      43KB

    • MD5

      48e8f2d02325efc478077b9c36eea2c7

    • SHA1

      a6e42979450ee8864d2e278677e72afe79eed705

    • SHA256

      3d99609d29ff105fb98e742e269ff7ba4bc660c3378ea261eada1ecb62c56913

    • SHA512

      f4e92864f04d56852731ba91d640ce2ef30dc8e5ed327e43e4b5d25f4f0d06cc07caf82eb86ee281fe852db2492d519df9f1418659df82a44b8d1dc6f786c873

    • SSDEEP

      768:yM8E/YC30zLP70lgrL9HI/ONvRCQ7UdBuOCUgNXmXHN:NYC38bgg9GQ7+CU4XmXHN

    Score
    8/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks