Overview

overview

9

Static

static

8b93ba21d9...1f.exe

windows7-x64

9

8b93ba21d9...1f.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b93ba21d9f4c760029da1c0c6542b1d17be351aa427e55b9689e0504e0a0e1f

  • Size

    1.1MB

  • Sample

    221124-lqhr5shf3y

  • MD5

    17a06607c1345c7c370c26383b83c42a

  • SHA1

    468c2996c62768abed05a04aafedcea35bef5859

  • SHA256

    8b93ba21d9f4c760029da1c0c6542b1d17be351aa427e55b9689e0504e0a0e1f

  • SHA512

    b1ca2cdf53599a7a6540808cd493702a8a3ecee8574c5ba4ec442c3b902ff2aef66bed693db65a2340793623234e8d4c73a843901156d339b7ba7a3d306fa865

  • SSDEEP

    24576:gZsipLov/sRLtqBGhEf24wlg9KU8L9g+AnsG31:8sikAEPnE/Lyxsu

Score
9/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      8b93ba21d9f4c760029da1c0c6542b1d17be351aa427e55b9689e0504e0a0e1f

    • Size

      1.1MB

    • MD5

      17a06607c1345c7c370c26383b83c42a

    • SHA1

      468c2996c62768abed05a04aafedcea35bef5859

    • SHA256

      8b93ba21d9f4c760029da1c0c6542b1d17be351aa427e55b9689e0504e0a0e1f

    • SHA512

      b1ca2cdf53599a7a6540808cd493702a8a3ecee8574c5ba4ec442c3b902ff2aef66bed693db65a2340793623234e8d4c73a843901156d339b7ba7a3d306fa865

    • SSDEEP

      24576:gZsipLov/sRLtqBGhEf24wlg9KU8L9g+AnsG31:8sikAEPnE/Lyxsu

    Score
    9/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks