Overview

overview

7

Static

static

1

ACGAM AG-1...15.exe

windows7-x64

7

ACGAM AG-1...15.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ACGAM AG-109R Driver5.0.0.15.exe

  • Size

    36.1MB

  • Sample

    230202-whwn5sgf69

  • MD5

    5c2b46a8c57a4966dbce8f3572b8150a

  • SHA1

    e2979fd280eeec74444307daa1b65400ca41f53f

  • SHA256

    e161ffb2f4360a26f06ec99b5662fa28a292cb5fd331b6136bb0e82002c4bdbf

  • SHA512

    8789525a49c0a439bf13efdd28106ffbe7024bffb7f3932db5a5054f604cde650f061fecb376603c1d68f3a4d4d02ba82ea3dbc17c5cd1050a8688f8deb59946

  • SSDEEP

    786432:ygpX/mFnkBAypx/eCA7xb+yucu7rz0HJQS2/L1opnQcOIei2IJTlC3EA:yg9mFnkCypx/eCA7xb+yk7raQf/LmucG

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      ACGAM AG-109R Driver5.0.0.15.exe

    • Size

      36.1MB

    • MD5

      5c2b46a8c57a4966dbce8f3572b8150a

    • SHA1

      e2979fd280eeec74444307daa1b65400ca41f53f

    • SHA256

      e161ffb2f4360a26f06ec99b5662fa28a292cb5fd331b6136bb0e82002c4bdbf

    • SHA512

      8789525a49c0a439bf13efdd28106ffbe7024bffb7f3932db5a5054f604cde650f061fecb376603c1d68f3a4d4d02ba82ea3dbc17c5cd1050a8688f8deb59946

    • SSDEEP

      786432:ygpX/mFnkBAypx/eCA7xb+yucu7rz0HJQS2/L1opnQcOIei2IJTlC3EA:yg9mFnkCypx/eCA7xb+yk7raQf/LmucG

    Score
    7/10
    bootkitdiscoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks