Overview

overview

6

Static

static

1

eefa052da0...06.exe

windows7-x64

6

eefa052da0...06.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Trojan.Ransom.Petya.zip

  • Size

    182KB

  • Sample

    230406-vjypfsea79

  • MD5

    089dcd9480fa127da76645e445c3e909

  • SHA1

    404fa8d1eb068452b0ee18a22cea2716d156bd10

  • SHA256

    01ee80fae9882c4905390a2927895e6bdcf74b1a5662c7577ab185b3c826b64b

  • SHA512

    16850e2a2972ba31830661f19edfbea9e72ae7081d27b517e3e707ba0b2ae80e4128c0e99b41c3104f1ac3d4904d8b1fd78f184b56eaf368b8a5b050e88d554c

  • SSDEEP

    3072:9Or8kHWEtPc8h8tMQ97IVlQHWNmQf9X+P7uWYimpGUDky4BwratiparfdsEXhb:9W93e2IYf9k7pYim4UZ4BEGHV

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      eefa052da01c3faa1d1f516ddfefa8ceb8a5185bb9b5368142ffdf839aea4506

    • Size

      328KB

    • MD5

      8ed9a60127aee45336102bf12059a850

    • SHA1

      b649b9bc9436d373fd09a89ed71840aa7ac5ec54

    • SHA256

      eefa052da01c3faa1d1f516ddfefa8ceb8a5185bb9b5368142ffdf839aea4506

    • SHA512

      95a0d62f02b29a48b1988cba6610b6410327f52ef918fd83fe2565d3767ab202d2a9aef6bcf47234c7c7200c49b71b80cd0430a7b6e55885f7a4b54a69e0dc2e

    • SSDEEP

      6144:wDeUVJuo0tl4VJLofrFD68Y7LE8DO11bEVUNNa:IuFl4VJ4D68YUQO1tEV

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks