General
-
Target
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6
-
Size
272KB
-
Sample
221203-gqlrkseb4y
-
MD5
fbe2308696ffcb319b5a5779de284ee4
-
SHA1
8483983a18b1a7b2b89329b928b12edde232b2e6
-
SHA256
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6
-
SHA512
601df8591762eeca39d28633cbc0e491577ba5bf420ceea7cf60e55059fcf3f024d86afb9458b98875487a9c4c37f878547ef61ab6fea5bffcfc52f632ce68aa
-
SSDEEP
6144:Nd0/YnDLofsLHWEdm9jMfyv4reILtewaTuJa:0kztdm9dQreqtew8uM
Static task
static1
Behavioral task
behavioral1
Sample
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6
-
Size
272KB
-
MD5
fbe2308696ffcb319b5a5779de284ee4
-
SHA1
8483983a18b1a7b2b89329b928b12edde232b2e6
-
SHA256
a2b72508892b20363bcb025bed7dcf1c0e1143feba47e53dbb536105e7fc9df6
-
SHA512
601df8591762eeca39d28633cbc0e491577ba5bf420ceea7cf60e55059fcf3f024d86afb9458b98875487a9c4c37f878547ef61ab6fea5bffcfc52f632ce68aa
-
SSDEEP
6144:Nd0/YnDLofsLHWEdm9jMfyv4reILtewaTuJa:0kztdm9dQreqtew8uM
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetThreadContext
-