Overview

overview

6

Static

static

a63b80b2ba...fd.exe

windows7-x64

1

a63b80b2ba...fd.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    a63b80b2bae9ba0003de290a60031820057777171b16467ffdae9c64fdbf85fd

  • Size

    607KB

  • Sample

    221030-h6mt9ahba4

  • MD5

    563c08bcf347eeb15dab50b797c70ad0

  • SHA1

    5d9e27aa335ab46510f72c1066a2e896e760943a

  • SHA256

    a63b80b2bae9ba0003de290a60031820057777171b16467ffdae9c64fdbf85fd

  • SHA512

    7e15dd54ce19c849e5c4dae20a13d859be93986296b6761479479d6c7a4d6bdf6e6bc6e260185ca026182fa13ffb515d909fde1c3b80b6c68d306ed5ac7ec813

  • SSDEEP

    12288:5ev5VKaT5MblxCKQm6CM1Pqf+JRLf+3z9m0o:4T5iCGXM1PRLGfo

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      a63b80b2bae9ba0003de290a60031820057777171b16467ffdae9c64fdbf85fd

    • Size

      607KB

    • MD5

      563c08bcf347eeb15dab50b797c70ad0

    • SHA1

      5d9e27aa335ab46510f72c1066a2e896e760943a

    • SHA256

      a63b80b2bae9ba0003de290a60031820057777171b16467ffdae9c64fdbf85fd

    • SHA512

      7e15dd54ce19c849e5c4dae20a13d859be93986296b6761479479d6c7a4d6bdf6e6bc6e260185ca026182fa13ffb515d909fde1c3b80b6c68d306ed5ac7ec813

    • SSDEEP

      12288:5ev5VKaT5MblxCKQm6CM1Pqf+JRLf+3z9m0o:4T5iCGXM1PRLGfo

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks