Overview

overview

8

Static

static

87dd096b40...e0.exe

windows7-x64

8

87dd096b40...e0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    87dd096b40d0aac83de1b54c276c0606a9934833b28c0cbfbbbc35397a36fae0

  • Size

    1.9MB

  • Sample

    221123-y1pdwsbe98

  • MD5

    7c39481d6f7a9e6b5d13dcabb8e66a87

  • SHA1

    cd38147395a8b87979c72f32f70f8b87ca81f6d7

  • SHA256

    87dd096b40d0aac83de1b54c276c0606a9934833b28c0cbfbbbc35397a36fae0

  • SHA512

    dfb2f2f7b75ea0e0f020b92062232db45b6e7a53dee149d864b122eeeca9b7cb0d5b5a25e8f9ccd672b428d9da80829079da1498b4bad5451e9b411eeee672ca

  • SSDEEP

    49152:HIbGWn+c26c85uTwbxsN5BhdNxfQ9kp8ijIF+zzA+fJtXRk/aS:H8+c2v85uTwbsx42bIY33tXRk/aS

Score
8/10
aspackv2bootkitpersistence

Malware Config

Targets

    • Target

      87dd096b40d0aac83de1b54c276c0606a9934833b28c0cbfbbbc35397a36fae0

    • Size

      1.9MB

    • MD5

      7c39481d6f7a9e6b5d13dcabb8e66a87

    • SHA1

      cd38147395a8b87979c72f32f70f8b87ca81f6d7

    • SHA256

      87dd096b40d0aac83de1b54c276c0606a9934833b28c0cbfbbbc35397a36fae0

    • SHA512

      dfb2f2f7b75ea0e0f020b92062232db45b6e7a53dee149d864b122eeeca9b7cb0d5b5a25e8f9ccd672b428d9da80829079da1498b4bad5451e9b411eeee672ca

    • SSDEEP

      49152:HIbGWn+c26c85uTwbxsN5BhdNxfQ9kp8ijIF+zzA+fJtXRk/aS:H8+c2v85uTwbsx42bIY33tXRk/aS

    Score
    8/10
    aspackv2bootkitpersistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks