978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5 | Triage

Submit
Reports

Overview

overview

8

Static

static

8

978d822ab8...d5.exe

windows7-x64

8

978d822ab8...d5.exe

windows10-2004-x64

8

Sharing

General

Target

978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5
Size

357KB
Sample

221125-17se8sdh6w
MD5

27977ed91436414661d00c1de0b6da26
SHA1

f27b3928df5ecfb87ba0ea8ed7f6e9db660a215c
SHA256

978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5
SHA512

fd40935f0cde968d2c956620cc3febe4a4afa33b74508fbfd1044c41e62710ddd2df078762d8148a6e15cafb2542e53e3e0fc82144ea2aca10c342e85959d413
SSDEEP

6144:iHm1aFYs1fpECX34IofXFK5c8HBgEBLCch1fBIwPdAtS3jilR9qNYgt8PFoSpi:PIFv1fp74I2XMjB1LCcHfBhaMjiR9qNU

Score

8^/10

bootkit evasion persistence trojan upx

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5.exe

Resource

win7-20220901-en

bootkit evasion persistence trojan upx

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5.exe

Resource

win10v2004-20221111-en

bootkit persistence upx

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5
- Size
  
  357KB
- MD5
  
  27977ed91436414661d00c1de0b6da26
- SHA1
  
  f27b3928df5ecfb87ba0ea8ed7f6e9db660a215c
- SHA256
  
  978d822ab83664974cabc8ec2359bbec744f544cbcc606658ae0b9ec0d9645d5
- SHA512
  
  fd40935f0cde968d2c956620cc3febe4a4afa33b74508fbfd1044c41e62710ddd2df078762d8148a6e15cafb2542e53e3e0fc82144ea2aca10c342e85959d413
- SSDEEP
  
  6144:iHm1aFYs1fpECX34IofXFK5c8HBgEBLCch1fBIwPdAtS3jilR9qNYgt8PFoSpi:PIFv1fp74I2XMjB1LCcHfBhaMjiR9qNU
Score

8^/10

bootkit evasion persistence trojan upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Checks whether UAC is enabled
  evasion trojan
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitevasionpersistencetrojanupx

behavioral2

bootkitpersistenceupx

© 2018-2024

Terms | Privacy