General
-
Target
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0
-
Size
322KB
-
Sample
221125-qjk15sdg7z
-
MD5
b6771b11f7aa2e739501488355d8326a
-
SHA1
5c5870b25a4211f2cc853f788f8bbb4ad71e4072
-
SHA256
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0
-
SHA512
584fa09bf588ade4739ba8578d5cd0022331c91f388c81bf27c9480117db0cd43e0191ca15f396cb8aa94cbfd4ee58e2123043d5fae150fce8bacca26d506ff6
-
SSDEEP
6144:Bz+92mhAMJ/cPl3i8/G9AKQ3SRGFLuT0bxDBgD9lkC06BAOMg9lDOV:BK2mhAMJ/cPlJGdQ3SRMLugbxuDzVnLi
Static task
static1
Behavioral task
behavioral1
Sample
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0
-
Size
322KB
-
MD5
b6771b11f7aa2e739501488355d8326a
-
SHA1
5c5870b25a4211f2cc853f788f8bbb4ad71e4072
-
SHA256
db5101650f4f671ff6c8e9d1525cb5df0d5b034f3ef91f448511f7fda06614c0
-
SHA512
584fa09bf588ade4739ba8578d5cd0022331c91f388c81bf27c9480117db0cd43e0191ca15f396cb8aa94cbfd4ee58e2123043d5fae150fce8bacca26d506ff6
-
SSDEEP
6144:Bz+92mhAMJ/cPl3i8/G9AKQ3SRGFLuT0bxDBgD9lkC06BAOMg9lDOV:BK2mhAMJ/cPlJGdQ3SRMLugbxuDzVnLi
Score8/10-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-