Overview

overview

7

Static

static

1

46eeaaec59...5d.exe

windows7-x64

7

46eeaaec59...5d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46eeaaec5999a27ae6e6b9e31bd90fabd756c2938455299ee20c6f0929cf0f5d

  • Size

    5.5MB

  • Sample

    230329-kfas4shb4s

  • MD5

    af7d653c5b1820e024900ae54cfdcd90

  • SHA1

    fa805aee94e55c5e4c0c9ecc7c784860064bf9b2

  • SHA256

    46eeaaec5999a27ae6e6b9e31bd90fabd756c2938455299ee20c6f0929cf0f5d

  • SHA512

    21759ace404871ef3f158a77ffdbe5205051cfb96b48839a1e53fc8d969154d658d15d962d4b2b44e233fb2e08ea6d54f93a7ed9ea49fd43be49e5fab4083a6c

  • SSDEEP

    98304:iOtNGVvfLObA94jMg7d988Z+29mMN9bCABGf5w12WP6VCzrPt4lsinrh:3tKfLL94jXg29Xj+h546oz+S8rh

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      46eeaaec5999a27ae6e6b9e31bd90fabd756c2938455299ee20c6f0929cf0f5d

    • Size

      5.5MB

    • MD5

      af7d653c5b1820e024900ae54cfdcd90

    • SHA1

      fa805aee94e55c5e4c0c9ecc7c784860064bf9b2

    • SHA256

      46eeaaec5999a27ae6e6b9e31bd90fabd756c2938455299ee20c6f0929cf0f5d

    • SHA512

      21759ace404871ef3f158a77ffdbe5205051cfb96b48839a1e53fc8d969154d658d15d962d4b2b44e233fb2e08ea6d54f93a7ed9ea49fd43be49e5fab4083a6c

    • SSDEEP

      98304:iOtNGVvfLObA94jMg7d988Z+29mMN9bCABGf5w12WP6VCzrPt4lsinrh:3tKfLL94jXg29Xj+h546oz+S8rh

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks