Overview

overview

8

Static

static

3d146c06a4...7e.exe

windows7-x64

8

3d146c06a4...7e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d146c06a4056ea7e2c36deb7ff5d357395fac7e

  • Size

    838KB

  • Sample

    230110-c2xk1ade8y

  • MD5

    5626664c95f52c3a479660ff2dfa6642

  • SHA1

    3d146c06a4056ea7e2c36deb7ff5d357395fac7e

  • SHA256

    5a66d86188a1b78c85f3fa73102d5b25d13c8aa56d3c746af19617da7a70f1a5

  • SHA512

    6b34bdcb19c1f66907226afe79125ef2856fb4ac29ed3ad6fb7e92fe0a3c5b6a3471e3a60cda8871f3a3a6fdf0d108cb4e04b789ce2e3eb17f08a19f0fac9a03

  • SSDEEP

    24576:Pw/5vsGHyDzX3SR0OfFAy/NH7m8uVcWAss:Pw/504yD7SRP/RNuf

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      3d146c06a4056ea7e2c36deb7ff5d357395fac7e

    • Size

      838KB

    • MD5

      5626664c95f52c3a479660ff2dfa6642

    • SHA1

      3d146c06a4056ea7e2c36deb7ff5d357395fac7e

    • SHA256

      5a66d86188a1b78c85f3fa73102d5b25d13c8aa56d3c746af19617da7a70f1a5

    • SHA512

      6b34bdcb19c1f66907226afe79125ef2856fb4ac29ed3ad6fb7e92fe0a3c5b6a3471e3a60cda8871f3a3a6fdf0d108cb4e04b789ce2e3eb17f08a19f0fac9a03

    • SSDEEP

      24576:Pw/5vsGHyDzX3SR0OfFAy/NH7m8uVcWAss:Pw/504yD7SRP/RNuf

    Score
    8/10
    bootkitpersistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks