a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d | Triage

Submit
Reports

Overview

overview

8

Static

static

a3b2fca72d...2d.exe

windows7-x64

8

a3b2fca72d...2d.exe

windows10-2004-x64

8

Sharing

General

Target

a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d
Size

1.1MB
Sample

221204-gt7s8agf6s
MD5

1b80115edb1d42d3af249918c38f2102
SHA1

2f9b16c0faa5ac2bd95daa7a542e8aa631a44de8
SHA256

a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d
SHA512

af0438d0851257eac162edb82a34db08ecb26a8761bd54e18f28ac89a1648fd6f9b652a270982c1c007e6ac01657b05349ca49e279938a36651f2aaa07e7cddc
SSDEEP

24576:pSPatCg7EPimZppQtJunSwtHNBBlIRtG/Z1CqlL:3tV7EPimVlnSw5IRE3CEL

Score

8^/10

bootkit evasion persistence trojan upx

Static task

static1

Behavioral task

behavioral1

Sample

a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d.exe

Resource

win7-20221111-en

bootkit evasion persistence trojan upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d.exe

Resource

win10v2004-20220901-en

bootkit evasion persistence trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d
- Size
  
  1.1MB
- MD5
  
  1b80115edb1d42d3af249918c38f2102
- SHA1
  
  2f9b16c0faa5ac2bd95daa7a542e8aa631a44de8
- SHA256
  
  a3b2fca72d8a599b526436774eb796bdabd92ad99bc06b249978f82d8da3dc2d
- SHA512
  
  af0438d0851257eac162edb82a34db08ecb26a8761bd54e18f28ac89a1648fd6f9b652a270982c1c007e6ac01657b05349ca49e279938a36651f2aaa07e7cddc
- SSDEEP
  
  24576:pSPatCg7EPimZppQtJunSwtHNBBlIRtG/Z1CqlL:3tV7EPimVlnSw5IRE3CEL
Score

8^/10

bootkit evasion persistence trojan upx
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitevasionpersistencetrojanupx

behavioral2

bootkitevasionpersistencetrojanupx

© 2018-2025

Terms | Privacy