Overview

overview

6

Static

static

wenminggd_sl.exe

windows7-x64

6

wenminggd_sl.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5fb13ca81e31732ed149d18f2e7cedda0ca2cfa8962cfce3ffea6acbbdf5d403

  • Size

    443KB

  • Sample

    221125-1wdspsch3t

  • MD5

    b00d52a486d2ee05c6891fe578c19650

  • SHA1

    08bce7e3585d9d3fa24766d5d52d5f4e61b41b74

  • SHA256

    5fb13ca81e31732ed149d18f2e7cedda0ca2cfa8962cfce3ffea6acbbdf5d403

  • SHA512

    9f6fb5c5c4fa9dd5a5a40b28b1b85f70e2927d1e6db7c64a861f82958af80f309e0b0e9da89e7aa06700313430e2e1a12e920a8ba84383b193976323e6cf955e

  • SSDEEP

    6144:nH57fd2CpkLP7tyR4j5nc9mvmgN+Ozv7vbAuG1qDxFAh3mNC5f4F3w6pjLKb57y:n+o6s6Fe5gN+O30q9F00oonpjQ57y

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      wenminggd_sl.exe

    • Size

      1.2MB

    • MD5

      ef6a20847627d443f906f0cbb3f4c1b4

    • SHA1

      836a2433a7e36db59ecab3de9c39bac9e36ca6f8

    • SHA256

      14fa59defe7e2c25cfa52bcab6e5ef6b635882aeafbe4a9f86215d363978594e

    • SHA512

      c1d9f4ec29c28bce2a5488aca5eb3e2120e1bf9499819832195c360423ee1e535889f958d4e43fa2981a5d9767bd446df498090f2ffb24b453c9166a40d8da8f

    • SSDEEP

      24576:vp5UAiLo6HPk0aBTN+YMV1Vx6AGOqfIe7VKG3u:v4SF0sBM1VyOq7KR

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks