Overview

overview

8

Static

static

dd1a4e387c...2e.exe

windows7-x64

8

dd1a4e387c...2e.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd1a4e387cad662a84a26fa28299757dd3efa5a9ae6e874af85865f39fa29b2e

  • Size

    199KB

  • Sample

    221203-djdkvahe87

  • MD5

    27861df261adbe9fb6d6ba7a1cf7ad20

  • SHA1

    4abaea17cacda41c3395dd41127d98e1a67bba9d

  • SHA256

    dd1a4e387cad662a84a26fa28299757dd3efa5a9ae6e874af85865f39fa29b2e

  • SHA512

    ab42c109cd826e16d09079636f9a21feca7df6f7ed277b6ce8b02778590467ad1075a93ca844ac93602e304d20e4f3e48845e9af54ac8d469ab08cf4bc0ab42f

  • SSDEEP

    3072:Q+467w4PQtbJltZrpRbyXgbLo9R/nR9QYfB6tyNDIOCOazP/kMqqb4P9X3x:ljgthpWsLQD9QyB6tyNDIOOr/kMqqM1R

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      dd1a4e387cad662a84a26fa28299757dd3efa5a9ae6e874af85865f39fa29b2e

    • Size

      199KB

    • MD5

      27861df261adbe9fb6d6ba7a1cf7ad20

    • SHA1

      4abaea17cacda41c3395dd41127d98e1a67bba9d

    • SHA256

      dd1a4e387cad662a84a26fa28299757dd3efa5a9ae6e874af85865f39fa29b2e

    • SHA512

      ab42c109cd826e16d09079636f9a21feca7df6f7ed277b6ce8b02778590467ad1075a93ca844ac93602e304d20e4f3e48845e9af54ac8d469ab08cf4bc0ab42f

    • SSDEEP

      3072:Q+467w4PQtbJltZrpRbyXgbLo9R/nR9QYfB6tyNDIOCOazP/kMqqb4P9X3x:ljgthpWsLQD9QyB6tyNDIOOr/kMqqM1R

    Score
    8/10
    bootkitpersistence

    • Drops file in Drivers directory

    • Sets DLL path for service in the registry

      persistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks