Overview

overview

7

Static

static

011c7ecf08...86.exe

windows7-x64

7

011c7ecf08...86.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    011c7ecf0842658a67c65c9e1b1c43fae1a8a7cf3ef0cb796ff733d37429a886

  • Size

    2.0MB

  • Sample

    221205-dhcxxsac59

  • MD5

    a296f9b0d2664d47972714673902a17a

  • SHA1

    e225484f5bfd4f0836b0af1747df920ed7ec269b

  • SHA256

    011c7ecf0842658a67c65c9e1b1c43fae1a8a7cf3ef0cb796ff733d37429a886

  • SHA512

    e92132051c018830121cc94b0995196bcbc8348f9756a2d3ea170292145434aa02a79e3cbf778629e3d75dd6cb5c9bd19830f1f345dd4f72b9677d081e7f430e

  • SSDEEP

    49152:E5lfUp//wyh+VOmUYuAR48k01aGsGzdAjlFmscmSZ5k:E5lfU5/wzVxUYK01liRDG5k

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      011c7ecf0842658a67c65c9e1b1c43fae1a8a7cf3ef0cb796ff733d37429a886

    • Size

      2.0MB

    • MD5

      a296f9b0d2664d47972714673902a17a

    • SHA1

      e225484f5bfd4f0836b0af1747df920ed7ec269b

    • SHA256

      011c7ecf0842658a67c65c9e1b1c43fae1a8a7cf3ef0cb796ff733d37429a886

    • SHA512

      e92132051c018830121cc94b0995196bcbc8348f9756a2d3ea170292145434aa02a79e3cbf778629e3d75dd6cb5c9bd19830f1f345dd4f72b9677d081e7f430e

    • SSDEEP

      49152:E5lfUp//wyh+VOmUYuAR48k01aGsGzdAjlFmscmSZ5k:E5lfU5/wzVxUYK01liRDG5k

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks