Overview

overview

8

Static

static

5cbc55701a...ad.exe

windows7-x64

8

5cbc55701a...ad.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5cbc55701a7f6973ea3985d469c2d2d9de8f5642de947c2a1e5813b4fd0363ad

  • Size

    3.8MB

  • Sample

    221125-kkw7xaeb65

  • MD5

    ee887f2b5372f8b906ddd78c4555ab28

  • SHA1

    714774a575d8594f29e86ac061bded3628aaceb5

  • SHA256

    5cbc55701a7f6973ea3985d469c2d2d9de8f5642de947c2a1e5813b4fd0363ad

  • SHA512

    8e1373a49becaf1def732ff4febc003c32d2169e5432eeda7d7599b618a26d79f35b7215162501aab42983bd2e66cff1f28fe3be899243434dbd18da2670c6d4

  • SSDEEP

    49152:Ye5KVFpiXThKVUKO8SsZ8wVFu+4p1ewogVdtXZ+iL35r8H:qFp8hSUKO8/Tu+SdJZjZ8H

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      5cbc55701a7f6973ea3985d469c2d2d9de8f5642de947c2a1e5813b4fd0363ad

    • Size

      3.8MB

    • MD5

      ee887f2b5372f8b906ddd78c4555ab28

    • SHA1

      714774a575d8594f29e86ac061bded3628aaceb5

    • SHA256

      5cbc55701a7f6973ea3985d469c2d2d9de8f5642de947c2a1e5813b4fd0363ad

    • SHA512

      8e1373a49becaf1def732ff4febc003c32d2169e5432eeda7d7599b618a26d79f35b7215162501aab42983bd2e66cff1f28fe3be899243434dbd18da2670c6d4

    • SSDEEP

      49152:Ye5KVFpiXThKVUKO8SsZ8wVFu+4p1ewogVdtXZ+iL35r8H:qFp8hSUKO8/Tu+SdJZjZ8H

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks