Overview

overview

7

Static

static

a551a561dd...50.exe

windows7-x64

7

a551a561dd...50.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a551a561dd9406a23526e439c72c12910e2b7c8fa0855983b0bb116cbfb58150

  • Size

    813KB

  • Sample

    221124-z32yfadd5w

  • MD5

    692065a54dcc974b9ebd167a39b708a0

  • SHA1

    e8d2baddc90a9c26916375601776685f50e0378d

  • SHA256

    a551a561dd9406a23526e439c72c12910e2b7c8fa0855983b0bb116cbfb58150

  • SHA512

    fc52cc0635035b28f86327345874740954936c52e4e8ffc84bcfca0f23661ffe7c5072f8a7608a5367ce9f98cb541d3c5592e0da6ce549369b10118340e15e5d

  • SSDEEP

    12288:q24Y24N7N7xiiu3C5gkROzUJmka/tB2+udrhq8IWW92wu/BnRT933pRH+004xkTP:Uz4NZfmkgt1uFNwu/X1z3O9UuiDm

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      a551a561dd9406a23526e439c72c12910e2b7c8fa0855983b0bb116cbfb58150

    • Size

      813KB

    • MD5

      692065a54dcc974b9ebd167a39b708a0

    • SHA1

      e8d2baddc90a9c26916375601776685f50e0378d

    • SHA256

      a551a561dd9406a23526e439c72c12910e2b7c8fa0855983b0bb116cbfb58150

    • SHA512

      fc52cc0635035b28f86327345874740954936c52e4e8ffc84bcfca0f23661ffe7c5072f8a7608a5367ce9f98cb541d3c5592e0da6ce549369b10118340e15e5d

    • SSDEEP

      12288:q24Y24N7N7xiiu3C5gkROzUJmka/tB2+udrhq8IWW92wu/BnRT933pRH+004xkTP:Uz4NZfmkgt1uFNwu/X1z3O9UuiDm

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks