Overview

overview

7

Static

static

7

99f3acae1a...3e.exe

windows7-x64

7

99f3acae1a...3e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    99f3acae1a5966bf32cd5378d58b449cecca3b3e82f2a73a6b034e25a4c9ee3e

  • Size

    1.8MB

  • Sample

    230529-g2ahpaad8z

  • MD5

    555bc3d0986df1a9e24b541df0175601

  • SHA1

    25b6f2a5cba775524532d285990006d029eb02c0

  • SHA256

    99f3acae1a5966bf32cd5378d58b449cecca3b3e82f2a73a6b034e25a4c9ee3e

  • SHA512

    f00fa50207b120b4efdaccb876ea0ad5c18fdc65debe713c80cfce0c38f2495643625823960272719cb855777d50c1da584fcecd3d6fa207656272f15a7f86cd

  • SSDEEP

    49152:oDabJnxefrnFSyRcUwbWgNKnO95j336m0GFJMTk8zCRQG9FN/:oelnxSrnFSyiUwXNCO7DF0GFOq99FN/

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      99f3acae1a5966bf32cd5378d58b449cecca3b3e82f2a73a6b034e25a4c9ee3e

    • Size

      1.8MB

    • MD5

      555bc3d0986df1a9e24b541df0175601

    • SHA1

      25b6f2a5cba775524532d285990006d029eb02c0

    • SHA256

      99f3acae1a5966bf32cd5378d58b449cecca3b3e82f2a73a6b034e25a4c9ee3e

    • SHA512

      f00fa50207b120b4efdaccb876ea0ad5c18fdc65debe713c80cfce0c38f2495643625823960272719cb855777d50c1da584fcecd3d6fa207656272f15a7f86cd

    • SSDEEP

      49152:oDabJnxefrnFSyRcUwbWgNKnO95j336m0GFJMTk8zCRQG9FN/:oelnxSrnFSyiUwXNCO7DF0GFOq99FN/

    Score
    7/10
    bootkitpersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks