Overview

overview

6

Static

static

64a1b74bf1...98.dll

windows7-x64

6

64a1b74bf1...98.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    64a1b74bf1e5d8215a4d3127c2fd8fab217fbfd568d65585e8df8cd89b466598

  • Size

    100KB

  • Sample

    221128-fqms7sgd97

  • MD5

    4a5135a27587bdc5967b991edec122bd

  • SHA1

    ab9d1cbfce466c2d4400aa92ea9572e5a82fb6bf

  • SHA256

    64a1b74bf1e5d8215a4d3127c2fd8fab217fbfd568d65585e8df8cd89b466598

  • SHA512

    61aa93d4c7e7e4b6137396b03ae2fd50eaf59794a393085b35d1d269af59d96f6959c6294d324fbe2c318951320f0109c077469249cf620013731b10818d53d1

  • SSDEEP

    1536:nDFDTbJAX7uAFIlK82t0suf9sEnRExZpoFounNZ8j94S8PDMPC1Y:nDFDvUFIL2tGlsEnQZOFfj8mPDOcY

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      64a1b74bf1e5d8215a4d3127c2fd8fab217fbfd568d65585e8df8cd89b466598

    • Size

      100KB

    • MD5

      4a5135a27587bdc5967b991edec122bd

    • SHA1

      ab9d1cbfce466c2d4400aa92ea9572e5a82fb6bf

    • SHA256

      64a1b74bf1e5d8215a4d3127c2fd8fab217fbfd568d65585e8df8cd89b466598

    • SHA512

      61aa93d4c7e7e4b6137396b03ae2fd50eaf59794a393085b35d1d269af59d96f6959c6294d324fbe2c318951320f0109c077469249cf620013731b10818d53d1

    • SSDEEP

      1536:nDFDTbJAX7uAFIlK82t0suf9sEnRExZpoFounNZ8j94S8PDMPC1Y:nDFDvUFIL2tGlsEnQZOFfj8mPDOcY

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks