Overview

overview

7

Static

static

cpuz_x64.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    cpuz_x64.exe

  • Size

    4.4MB

  • Sample

    230101-3kvcesda37

  • MD5

    230fe0e593855f67ac276298644daa49

  • SHA1

    addda23a8954d4ab8ff1d68280f2b13c33988cf0

  • SHA256

    2f90cfc224fef174fe7dc29de22ca4966854ef9a9700e41665fc7b42f0618494

  • SHA512

    c361eae4267e3bd45bccc150e78750beb9d42c373b24de2312f36cd0d32e0e02c58e8e7554a7ccb7c8978a5e2cfc8478ea8067b2ab43d435f7b469b91e3c99da

  • SSDEEP

    49152:bPp2c2lJ2bPin6caLu3ZwdTFyT5m/f/06pItLc8aOm7s+TgHI:bc8bmHni1/f/p427hTgo

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      cpuz_x64.exe

    • Size

      4.4MB

    • MD5

      230fe0e593855f67ac276298644daa49

    • SHA1

      addda23a8954d4ab8ff1d68280f2b13c33988cf0

    • SHA256

      2f90cfc224fef174fe7dc29de22ca4966854ef9a9700e41665fc7b42f0618494

    • SHA512

      c361eae4267e3bd45bccc150e78750beb9d42c373b24de2312f36cd0d32e0e02c58e8e7554a7ccb7c8978a5e2cfc8478ea8067b2ab43d435f7b469b91e3c99da

    • SSDEEP

      49152:bPp2c2lJ2bPin6caLu3ZwdTFyT5m/f/06pItLc8aOm7s+TgHI:bc8bmHni1/f/p427hTgo

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks