General
-
Target
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8
-
Size
492KB
-
Sample
221203-g1w1asbe42
-
MD5
c1a9b27e23a125cc009a1cfa32df240d
-
SHA1
6b41d7fbcb3378846f9e6ae381fd30c00255f891
-
SHA256
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8
-
SHA512
c58819845a35062108b6fab8c5ed45acbd13db1ae0a5986d1713a99523fdd0d2ef99680b78ae30dc0e1bae31ad8a5bcc7997968b63ad191d254cb9830a1bd31c
-
SSDEEP
12288:521aaxNqlL4jz63Q5eeJEw0EdD2PiBroUgIrU:5Oqlcjl51aE8PiBsjq
Static task
static1
Behavioral task
behavioral1
Sample
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8
-
Size
492KB
-
MD5
c1a9b27e23a125cc009a1cfa32df240d
-
SHA1
6b41d7fbcb3378846f9e6ae381fd30c00255f891
-
SHA256
754a376eb99bdd9016f57c6edb7493a18b12bb0f381890a882d33888003a38c8
-
SHA512
c58819845a35062108b6fab8c5ed45acbd13db1ae0a5986d1713a99523fdd0d2ef99680b78ae30dc0e1bae31ad8a5bcc7997968b63ad191d254cb9830a1bd31c
-
SSDEEP
12288:521aaxNqlL4jz63Q5eeJEw0EdD2PiBroUgIrU:5Oqlcjl51aE8PiBsjq
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-