Overview

overview

8

Static

static

8

abe9fbdcc2...56.exe

windows7-x64

8

abe9fbdcc2...56.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    abe9fbdcc296ee253050633b6b6c412a69a59227e8d288b6948c092676c34e56

  • Size

    241KB

  • Sample

    221124-eqjwwabd7s

  • MD5

    60230e457d1a9083bb250772af61c7a4

  • SHA1

    da2ddea42e78f405140623c09f2f6b38009cc8d1

  • SHA256

    abe9fbdcc296ee253050633b6b6c412a69a59227e8d288b6948c092676c34e56

  • SHA512

    f73eb16ac03f144095dd5ecb24b4832e3d44f386e809b611c9b8efa8351ca9b9cc87ff9a3193cf6398169f412eb0fff08d7f1ad0c7702beda9d3b641a3d081af

  • SSDEEP

    6144:lkeENDvTSn2SV/GuhYdViC7X57+nMgvezR:lNEND/k/GLPX57+nd2zR

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      abe9fbdcc296ee253050633b6b6c412a69a59227e8d288b6948c092676c34e56

    • Size

      241KB

    • MD5

      60230e457d1a9083bb250772af61c7a4

    • SHA1

      da2ddea42e78f405140623c09f2f6b38009cc8d1

    • SHA256

      abe9fbdcc296ee253050633b6b6c412a69a59227e8d288b6948c092676c34e56

    • SHA512

      f73eb16ac03f144095dd5ecb24b4832e3d44f386e809b611c9b8efa8351ca9b9cc87ff9a3193cf6398169f412eb0fff08d7f1ad0c7702beda9d3b641a3d081af

    • SSDEEP

      6144:lkeENDvTSn2SV/GuhYdViC7X57+nMgvezR:lNEND/k/GLPX57+nd2zR

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks