General
-
Target
watch
-
Size
747KB
-
Sample
230405-15kmlshg59
-
MD5
6bb2d583f8cf1515275418c789c6b9eb
-
SHA1
92e2f6d7a894626a26caaf96b13f6f0e54f8f925
-
SHA256
648b4ba0642d127e73217d9c54b7f1401bf39b28fa02b989dca2760a2b4ef153
-
SHA512
9f7a9a0664b80fad61124adb7b3f3f00c4b583a2190d512230a2b15150b0b9bbd952251d37ba2e03f800d43d009bcc5e0f318df268cbeb2b1077ace3a2bd9ea4
-
SSDEEP
12288:3UsDOalcxWzd61/pcH/uTvQ31/NW1D/ll:Wyd8pcH/LNY
Static task
static1
Behavioral task
behavioral1
Sample
watch.html
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
watch.html
Resource
win10v2004-20230221-en
Malware Config
Targets
-
-
Target
watch
-
Size
747KB
-
MD5
6bb2d583f8cf1515275418c789c6b9eb
-
SHA1
92e2f6d7a894626a26caaf96b13f6f0e54f8f925
-
SHA256
648b4ba0642d127e73217d9c54b7f1401bf39b28fa02b989dca2760a2b4ef153
-
SHA512
9f7a9a0664b80fad61124adb7b3f3f00c4b583a2190d512230a2b15150b0b9bbd952251d37ba2e03f800d43d009bcc5e0f318df268cbeb2b1077ace3a2bd9ea4
-
SSDEEP
12288:3UsDOalcxWzd61/pcH/uTvQ31/NW1D/ll:Wyd8pcH/LNY
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-