Overview

overview

8

Static

static

5

47b9af387c...8e.exe

windows7-x64

8

47b9af387c...8e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47b9af387c636fdbaed19859f4c8fc69e48e24c0d0dcd2c27897c508ad65c88e

  • Size

    6.9MB

  • Sample

    221123-rrttpacd2w

  • MD5

    288a0c8907936cc6dafaa79ba5cfbacd

  • SHA1

    91cca902ed0da3d03c4c05c51f698e96f0e15585

  • SHA256

    47b9af387c636fdbaed19859f4c8fc69e48e24c0d0dcd2c27897c508ad65c88e

  • SHA512

    7e7edc8b390753b3f6c7c20ef7cf75d7af033c1efc092cc9f491111fe201678b82fa1df823a984d349adcf42f9cd0dae4dc57ce9a4ca5856350f5683df0d107c

  • SSDEEP

    196608:dA4Vq7oMhZ+h63cBtL6FD0NMev3QQQicQ:TjdyFD0NMev3NhcQ

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      47b9af387c636fdbaed19859f4c8fc69e48e24c0d0dcd2c27897c508ad65c88e

    • Size

      6.9MB

    • MD5

      288a0c8907936cc6dafaa79ba5cfbacd

    • SHA1

      91cca902ed0da3d03c4c05c51f698e96f0e15585

    • SHA256

      47b9af387c636fdbaed19859f4c8fc69e48e24c0d0dcd2c27897c508ad65c88e

    • SHA512

      7e7edc8b390753b3f6c7c20ef7cf75d7af033c1efc092cc9f491111fe201678b82fa1df823a984d349adcf42f9cd0dae4dc57ce9a4ca5856350f5683df0d107c

    • SSDEEP

      196608:dA4Vq7oMhZ+h63cBtL6FD0NMev3QQQicQ:TjdyFD0NMev3NhcQ

    Score
    8/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks