Overview

overview

6

Static

static

1

0643ef7128...a8.exe

windows7-x64

6

0643ef7128...a8.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0643ef71288bde5c2d85051dd523012082166f202cb2c793fbbb3ee1619b5ba8

  • Size

    210KB

  • Sample

    230328-jpx5bshf89

  • MD5

    317611559486942618192414f0e2d812

  • SHA1

    06e09efd00deb86113eea9266d91b2c81404a120

  • SHA256

    0643ef71288bde5c2d85051dd523012082166f202cb2c793fbbb3ee1619b5ba8

  • SHA512

    252bf922e93c0a0e02aefe7ddab208420ae16605b632955372c22b2c784679e6217888856006e30214aa385ce13a38e648b35b34f4bac7f133571f38baf9d61e

  • SSDEEP

    3072:jVMDRLFHko2q3dF/pstBaDqwONnct437Bl3N2U+jZwMd:5MDNFEm3dF/p/uwONct43j92U+l

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      0643ef71288bde5c2d85051dd523012082166f202cb2c793fbbb3ee1619b5ba8

    • Size

      210KB

    • MD5

      317611559486942618192414f0e2d812

    • SHA1

      06e09efd00deb86113eea9266d91b2c81404a120

    • SHA256

      0643ef71288bde5c2d85051dd523012082166f202cb2c793fbbb3ee1619b5ba8

    • SHA512

      252bf922e93c0a0e02aefe7ddab208420ae16605b632955372c22b2c784679e6217888856006e30214aa385ce13a38e648b35b34f4bac7f133571f38baf9d61e

    • SSDEEP

      3072:jVMDRLFHko2q3dF/pstBaDqwONnct437Bl3N2U+jZwMd:5MDNFEm3dF/p/uwONct43j92U+l

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks