Overview

overview

8

Static

static

e824693bc6...00.dll

windows7-x64

8

e824693bc6...00.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e824693bc6a3853ec92348eb3b992b44f60559339c49e22c35b0a2e4e9d38b00

  • Size

    424KB

  • Sample

    221203-jvx2hsbb6z

  • MD5

    914352a2d65e7e7097022da5b100d716

  • SHA1

    7a6ab25058353e3340d791cf745f26e4095996bd

  • SHA256

    e824693bc6a3853ec92348eb3b992b44f60559339c49e22c35b0a2e4e9d38b00

  • SHA512

    dee205507220190116b4e850f8dfa4ee478ec8afab7a7bf13dd15db6c323383e68e4bb7c9804af5beb229611d81fc6ed627f8679acf58aeb4c193610ed019534

  • SSDEEP

    12288:m2Qdb+1XlqlOBCmGQeIy2km+p8oOeTBgdg:m2NlqCCfIyHp8ongdg

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      e824693bc6a3853ec92348eb3b992b44f60559339c49e22c35b0a2e4e9d38b00

    • Size

      424KB

    • MD5

      914352a2d65e7e7097022da5b100d716

    • SHA1

      7a6ab25058353e3340d791cf745f26e4095996bd

    • SHA256

      e824693bc6a3853ec92348eb3b992b44f60559339c49e22c35b0a2e4e9d38b00

    • SHA512

      dee205507220190116b4e850f8dfa4ee478ec8afab7a7bf13dd15db6c323383e68e4bb7c9804af5beb229611d81fc6ed627f8679acf58aeb4c193610ed019534

    • SSDEEP

      12288:m2Qdb+1XlqlOBCmGQeIy2km+p8oOeTBgdg:m2NlqCCfIyHp8ongdg

    Score
    8/10
    bootkitpersistence

    • Blocklisted process makes network request

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks