General
-
Target
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74
-
Size
844KB
-
Sample
221205-hehq8aab5s
-
MD5
c06ec00914836f74acb11a22b5ebe82c
-
SHA1
a941b3241d79245b35a092059a398cac11f5aa5f
-
SHA256
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74
-
SHA512
e4f6c1c4f36439058f7e86c262b2c383cffda0a2443f5c9cb7a23232b790cf30b508a22337bb1215f279aac3eaf383a44605b46048f004b7978e5a4d7219c003
-
SSDEEP
12288:sqejXb3FnOyyoeNJ2S98aR+G0TqEdaNahcbbfcRrRtzPyY7Eu+uEsQs8aXe6fWM:sqejooeHgTqEINwCXY7Eu+bsQs84eY
Static task
static1
Behavioral task
behavioral1
Sample
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74
-
Size
844KB
-
MD5
c06ec00914836f74acb11a22b5ebe82c
-
SHA1
a941b3241d79245b35a092059a398cac11f5aa5f
-
SHA256
c3c4b87a6ffb4ca6be623f0c3c8af2b4f8779443e07f4d87a5d4431fdeea2f74
-
SHA512
e4f6c1c4f36439058f7e86c262b2c383cffda0a2443f5c9cb7a23232b790cf30b508a22337bb1215f279aac3eaf383a44605b46048f004b7978e5a4d7219c003
-
SSDEEP
12288:sqejXb3FnOyyoeNJ2S98aR+G0TqEdaNahcbbfcRrRtzPyY7Eu+uEsQs8aXe6fWM:sqejooeHgTqEINwCXY7Eu+bsQs84eY
Score8/10-
Executes dropped EXE
-
Modifies Installed Components in the registry
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-