Overview

overview

6

Static

static

6c42423e18...19.exe

windows7-x64

6

6c42423e18...19.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719

  • Size

    1.4MB

  • Sample

    221204-dehn1aef6y

  • MD5

    5d93d6b3c7fae90403a91666598d3d9f

  • SHA1

    db22b53e6cb625c7cae1befa0655e83176dd9a76

  • SHA256

    6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719

  • SHA512

    e20334d38b266caa8cf39e06362513d12b73995f9d1f9adbee353b6b58956825e53d146c34dc5c7011881cdab47eba968622c4df7e5474c1963ee59a77c1dd84

  • SSDEEP

    24576:JHPn34MhTCilQoR1Ke2xnk6c/gfsGfhyQemrNDgPUzCgnextHWUziJm4IFMesbT7:RP9RbGGc9eTYmEbTrL1OImTyTYhlB7B

Score
6/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719

    • Size

      1.4MB

    • MD5

      5d93d6b3c7fae90403a91666598d3d9f

    • SHA1

      db22b53e6cb625c7cae1befa0655e83176dd9a76

    • SHA256

      6c42423e18decb610668de1f708a55f80dc7e73b4fbf32c739b9c6d4d4d97719

    • SHA512

      e20334d38b266caa8cf39e06362513d12b73995f9d1f9adbee353b6b58956825e53d146c34dc5c7011881cdab47eba968622c4df7e5474c1963ee59a77c1dd84

    • SSDEEP

      24576:JHPn34MhTCilQoR1Ke2xnk6c/gfsGfhyQemrNDgPUzCgnextHWUziJm4IFMesbT7:RP9RbGGc9eTYmEbTrL1OImTyTYhlB7B

    Score
    6/10
    bootkitevasionpersistencetrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks