Overview

overview

8

Static

static

1

BONZIFY.exe

windows7-x64

8

BONZIFY.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    The Big Bang.iso

  • Size

    6.9MB

  • Sample

    230411-gahpzscc41

  • MD5

    2c0fcd3dcdc31f3c8a19a43a60900ce7

  • SHA1

    9127ffc5915e3142410f164ad8fbe4e4029be097

  • SHA256

    b553b401f8d8fa47db7f3b513637145453337159d0acca460b4efcdaf5ef5c61

  • SHA512

    5903ee1db1677acd91ffab49494af43a2d80add3c1c785a104b1737fc7f158507019a267e6380a95482da8bb9c1d8006b6bed6855fbc9e54e30394a814ed123f

  • SSDEEP

    196608:LdAMaWetTeAkLIdx751qFTkub//73lc6u7b5VJ2Yx5xIdk3:raWedh+Idx75QYub//73lc6u7bLMYxD

Score
8/10
discoveryexploit

Malware Config

Targets

    • Target

      BONZIFY.EXE

    • Size

      6.4MB

    • MD5

      fba93d8d029e85e0cde3759b7903cee2

    • SHA1

      525b1aa549188f4565c75ab69e51f927204ca384

    • SHA256

      66f62408dfce7c4a5718d2759f1d35721ca22077398850277d16e1fca87fe764

    • SHA512

      7c1441b2e804e925eb5a03e97db620117d3ad4f6981dc020e4e7df4bfc4bd6e414fa3b0ce764481a2cef07eebb2baa87407355bfbe88fab96397d82bd441e6a2

    • SSDEEP

      196608:adAMaWetTeAkLIdx751qFTkub//73lc6u7b5VJ2Yx5xIdk3:OaWedh+Idx75QYub//73lc6u7bLMYxD

    Score
    8/10
    discoveryexploit

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

File Permissions Modification

1
T1222

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks