General
-
Target
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a
-
Size
14.7MB
-
Sample
221126-mm9bcsaa62
-
MD5
514cf70b8c755ebdc5827d196ec24e2a
-
SHA1
10d8eefe53c348966e84064429328389ad051fae
-
SHA256
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a
-
SHA512
ba7dfeda6900e9af3dfdb12c5331069de5f7897f7752028671d7ef93e20b66bcd3c7d812b0679cfcdf443062ddf91cb1f0e450aa35c4bf03c8c628d59ce2d3f8
-
SSDEEP
393216:MsuK9sTjOt8phu8NUxXbFbaWpbciOk1EA2i+0D:v9cOt8G8Wv3pbJWA
Behavioral task
behavioral1
Sample
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a
-
Size
14.7MB
-
MD5
514cf70b8c755ebdc5827d196ec24e2a
-
SHA1
10d8eefe53c348966e84064429328389ad051fae
-
SHA256
c553310e8bda393daa50abdf8bf4aa456c2e7ba309fd86888ba07463824f5d0a
-
SHA512
ba7dfeda6900e9af3dfdb12c5331069de5f7897f7752028671d7ef93e20b66bcd3c7d812b0679cfcdf443062ddf91cb1f0e450aa35c4bf03c8c628d59ce2d3f8
-
SSDEEP
393216:MsuK9sTjOt8phu8NUxXbFbaWpbciOk1EA2i+0D:v9cOt8G8Wv3pbJWA
Score8/10-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-