Overview

overview

8

Static

static

c6a6e8fb77...12.dll

windows7-x64

8

c6a6e8fb77...12.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6a6e8fb770c9d9ba417208c828873fb74170417d18d5e15c4b37792a344e812

  • Size

    435KB

  • Sample

    221107-g4f39aedfp

  • MD5

    09400ce5661a66203f972b62f555d38b

  • SHA1

    baeff48d5b45fa207079a23a6425f4d956731b2e

  • SHA256

    c6a6e8fb770c9d9ba417208c828873fb74170417d18d5e15c4b37792a344e812

  • SHA512

    8469c11f811bb97b9c85ba1e4edfc464db8842205b00cff7249cbb39a8c73c7af0825f7fe75a4c58f43bed1f653d9331b71a6101f102989e9f5bc5a6b33c65e7

  • SSDEEP

    12288:rXVQ5IHfzePx36jh7d60KzHBJ8If3qNctO3CwZXhhzVwvl:rC5enZQ4IfjtiC2hhid

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      c6a6e8fb770c9d9ba417208c828873fb74170417d18d5e15c4b37792a344e812

    • Size

      435KB

    • MD5

      09400ce5661a66203f972b62f555d38b

    • SHA1

      baeff48d5b45fa207079a23a6425f4d956731b2e

    • SHA256

      c6a6e8fb770c9d9ba417208c828873fb74170417d18d5e15c4b37792a344e812

    • SHA512

      8469c11f811bb97b9c85ba1e4edfc464db8842205b00cff7249cbb39a8c73c7af0825f7fe75a4c58f43bed1f653d9331b71a6101f102989e9f5bc5a6b33c65e7

    • SSDEEP

      12288:rXVQ5IHfzePx36jh7d60KzHBJ8If3qNctO3CwZXhhzVwvl:rC5enZQ4IfjtiC2hhid

    Score
    8/10
    bootkitpersistence

    • Blocklisted process makes network request

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks