General
-
Target
09a814bc6955775bd006484c1098aa2e9d42afdd298261e1456ed26f1dcaf1e5
-
Size
510KB
-
Sample
221125-2q24sace93
-
MD5
47333d37a3084db8826bb3d425caed11
-
SHA1
2df9f7cbdef2c6651756675471e627e9ad05998b
-
SHA256
09a814bc6955775bd006484c1098aa2e9d42afdd298261e1456ed26f1dcaf1e5
-
SHA512
17e48987634b6d959f3143620897ceca087a3bdecb1fdd9a5c6ff814930f47e96ecea56f70477fa7fb723fc52560bb453a1b9c180ae676d131980d2d3116142c
-
SSDEEP
12288:9RALejXVHcnXmpirToazakLoEx8AauMqBG5fAjszGx9:TAapHywirToafmzuMqBGSkG9
Static task
static1
Behavioral task
behavioral1
Sample
fujian_xst.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fujian_xst.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
fujian_xst.exe
-
Size
1.3MB
-
MD5
51bd2ef56c691effd229419d38f75087
-
SHA1
f6dc0bfd564641a7ff6c6acf5c85061039310c4a
-
SHA256
b5a63eba28ae7799be4a7482b427133f92e3d5bdbf2019f931f785b0b5dc3aac
-
SHA512
4aa45c9f8e311d8861909aa9c859432020440faf4b9c3194f5081a22a40baec3066bb19b6af31933ef231c0171301a8b40c5e37d754e70c911accd0078bb6de5
-
SSDEEP
24576:dS7PvNyB1bUSbLtxCl1xYBeJjrgIk6bWWbCcKk4gV2V0jG3A:dSE1jMbPJ06bWbcIY2mf
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-