Overview

overview

6

Static

static

1

zipbomb.html

windows7-x64

1

zipbomb.html

windows10-2004-x64

6

Resubmissions

07-04-2023 01:46

230407-b7erpshh5z 6

07-04-2023 01:43

230407-b5kj6shh5v 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    zipbomb

  • Size

    143KB

  • Sample

    230407-b7erpshh5z

  • MD5

    49d0dbd5549bad48ec263a03fa0783b6

  • SHA1

    d9618506e5ccab33257b0f7ee416a3c710638276

  • SHA256

    63aa94f0cc44cbe9b666a37f5aa74e6c0ca0034d56345f27fb7e23fdeab41106

  • SHA512

    9e6fc3c8c1bdb3fbc1ce4596a725b2631988e75baee02675da5842937888c06373154380153e7a165f0eb170dab86207fb570cd2487612b405d4a97b883253d1

  • SSDEEP

    768:5UXzDuaG4SFT/ewifzw5w0Ocff6SDZqhAPiOBoBrTTb+dIAWerFC5OH4d1YGL66N:5IG4SFMUpCAqh2BkGpWUw5O5C8W

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      zipbomb

    • Size

      143KB

    • MD5

      49d0dbd5549bad48ec263a03fa0783b6

    • SHA1

      d9618506e5ccab33257b0f7ee416a3c710638276

    • SHA256

      63aa94f0cc44cbe9b666a37f5aa74e6c0ca0034d56345f27fb7e23fdeab41106

    • SHA512

      9e6fc3c8c1bdb3fbc1ce4596a725b2631988e75baee02675da5842937888c06373154380153e7a165f0eb170dab86207fb570cd2487612b405d4a97b883253d1

    • SSDEEP

      768:5UXzDuaG4SFT/ewifzw5w0Ocff6SDZqhAPiOBoBrTTb+dIAWerFC5OH4d1YGL66N:5IG4SFMUpCAqh2BkGpWUw5O5C8W

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks