Overview

overview

9

Static

static

40694b94ae...7e.exe

windows7-x64

9

40694b94ae...7e.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    40694b94ae2c09c7c4109daafcd46f7b9ff4ff59b2cde79b7f20da4551533c7e

  • Size

    3.0MB

  • Sample

    221127-apxzwsfe35

  • MD5

    cd494956ae053b05c3ec4f37c76157da

  • SHA1

    dc67420a9e6cef5d2ad55612b524b59d078d5596

  • SHA256

    40694b94ae2c09c7c4109daafcd46f7b9ff4ff59b2cde79b7f20da4551533c7e

  • SHA512

    0cc0e6357be191b1ff2745b78fad2438af72b81b176c76b0d19f2b41b21b93f7596d36fae7ffd7204b9cf6572a4698ecd071b5d120a7ad1c8f69912ba7d4060f

  • SSDEEP

    49152:Ind4qccjTZaqdwk0c05HGiQSzSY5vEU7zQYTDpf8xv/hqpB+W6U1jM9:sFc6YqdwkLcHHQsSYF8slYvUwnco

Score
9/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      40694b94ae2c09c7c4109daafcd46f7b9ff4ff59b2cde79b7f20da4551533c7e

    • Size

      3.0MB

    • MD5

      cd494956ae053b05c3ec4f37c76157da

    • SHA1

      dc67420a9e6cef5d2ad55612b524b59d078d5596

    • SHA256

      40694b94ae2c09c7c4109daafcd46f7b9ff4ff59b2cde79b7f20da4551533c7e

    • SHA512

      0cc0e6357be191b1ff2745b78fad2438af72b81b176c76b0d19f2b41b21b93f7596d36fae7ffd7204b9cf6572a4698ecd071b5d120a7ad1c8f69912ba7d4060f

    • SSDEEP

      49152:Ind4qccjTZaqdwk0c05HGiQSzSY5vEU7zQYTDpf8xv/hqpB+W6U1jM9:sFc6YqdwkLcHHQsSYF8slYvUwnco

    Score
    9/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks