Overview

overview

7

Static

static

6a5fb367f9...44.exe

windows7-x64

7

6a5fb367f9...44.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a5fb367f94fcf89add5b223fa9acf48c0ed8cf59cef2c861b73a185dfee7e44

  • Size

    1.9MB

  • Sample

    221124-pzr9qahc61

  • MD5

    3fa87385441b44221f407d4235b7c4de

  • SHA1

    14b3369ca3c0c23736f4ecacb14582091f98a8c4

  • SHA256

    6a5fb367f94fcf89add5b223fa9acf48c0ed8cf59cef2c861b73a185dfee7e44

  • SHA512

    1ee134fad0bdbcc88ec1c71fdd003175cd4f35c70a5a0075fc3bb6da75a9abfc43d13138831dc0c8cc0f3dea1a06bb63a3410617a8cf1b232e7aecd3109375d3

  • SSDEEP

    49152:O2y6li4Yy7G+OZ3rg7+SPIH4k9dNprVnN2+MRyZZtUAuPmfkK:jy6liyjOZ3W+yIXpVnN/MRQZ6AUen

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      6a5fb367f94fcf89add5b223fa9acf48c0ed8cf59cef2c861b73a185dfee7e44

    • Size

      1.9MB

    • MD5

      3fa87385441b44221f407d4235b7c4de

    • SHA1

      14b3369ca3c0c23736f4ecacb14582091f98a8c4

    • SHA256

      6a5fb367f94fcf89add5b223fa9acf48c0ed8cf59cef2c861b73a185dfee7e44

    • SHA512

      1ee134fad0bdbcc88ec1c71fdd003175cd4f35c70a5a0075fc3bb6da75a9abfc43d13138831dc0c8cc0f3dea1a06bb63a3410617a8cf1b232e7aecd3109375d3

    • SSDEEP

      49152:O2y6li4Yy7G+OZ3rg7+SPIH4k9dNprVnN2+MRyZZtUAuPmfkK:jy6liyjOZ3W+yIXpVnN/MRQZ6AUen

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks