Overview

overview

8

Static

static

ffadc595e2...2c.exe

windows7-x64

8

ffadc595e2...2c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ffadc595e2eef045d76ad97944b2daa457a9db893cd7c471167e83e50d1e352c

  • Size

    164KB

  • Sample

    221204-d8tcladb87

  • MD5

    3125224496a4396b708e0b00eda95ad4

  • SHA1

    8eacac197b5fb24f5eb6049bc07996830ec79f38

  • SHA256

    ffadc595e2eef045d76ad97944b2daa457a9db893cd7c471167e83e50d1e352c

  • SHA512

    81f6aab0bd16845b0e4359f8c78434f893e9ad40512c2020464e3ad733593358501abb659ab92bf80d0875bbd814bdc855748a54c6773b62258fae8a3554e057

  • SSDEEP

    3072:Ye2iWv0RD7L4IDnkHxbuhA3KU2i8cZUrj3hTS:Ye2iI0RDX4IaoAd2i8brj3ZS

Score
8/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ffadc595e2eef045d76ad97944b2daa457a9db893cd7c471167e83e50d1e352c

    • Size

      164KB

    • MD5

      3125224496a4396b708e0b00eda95ad4

    • SHA1

      8eacac197b5fb24f5eb6049bc07996830ec79f38

    • SHA256

      ffadc595e2eef045d76ad97944b2daa457a9db893cd7c471167e83e50d1e352c

    • SHA512

      81f6aab0bd16845b0e4359f8c78434f893e9ad40512c2020464e3ad733593358501abb659ab92bf80d0875bbd814bdc855748a54c6773b62258fae8a3554e057

    • SSDEEP

      3072:Ye2iWv0RD7L4IDnkHxbuhA3KU2i8cZUrj3hTS:Ye2iI0RDX4IaoAd2i8brj3ZS

    Score
    8/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks