Overview

overview

8

Static

static

1

filmora_se...69.exe

windows7-x64

8

filmora_se...69.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    filmora_setup_full5869.exe

  • Size

    1.1MB

  • Sample

    230317-aflkhadd87

  • MD5

    de5a69d7b08dbc2108fc36f047a2f717

  • SHA1

    e7651385daf8819c8410817fcfd6bdc80a9c6c0c

  • SHA256

    553bf5758d484cfe17a79b5445395975410074b1ed7580434036b5e89dbfb686

  • SHA512

    901323ca758957c2a429e01f19120bd2773dee6df4d73b7d705451474ec1eed6f0639b71f432844850b2a5276d1682e557360c6e1e5d64f2028f6670235b7348

  • SSDEEP

    24576:pn6ErQyWTLNJr/nWigjYw0WDmqUFvv+QfJ:pn6Er3WTLNJDWiEY0JUNmq

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      filmora_setup_full5869.exe

    • Size

      1.1MB

    • MD5

      de5a69d7b08dbc2108fc36f047a2f717

    • SHA1

      e7651385daf8819c8410817fcfd6bdc80a9c6c0c

    • SHA256

      553bf5758d484cfe17a79b5445395975410074b1ed7580434036b5e89dbfb686

    • SHA512

      901323ca758957c2a429e01f19120bd2773dee6df4d73b7d705451474ec1eed6f0639b71f432844850b2a5276d1682e557360c6e1e5d64f2028f6670235b7348

    • SSDEEP

      24576:pn6ErQyWTLNJr/nWigjYw0WDmqUFvv+QfJ:pn6Er3WTLNJDWiEY0JUNmq

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks