Overview

overview

6

Static

static

3

02299599.exe

windows7-x64

02299599.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02299599.exe

  • Size

    135KB

  • Sample

    230609-jgz9qabd97

  • MD5

    3b557b8787d9c3f9af5a57ae6a4232ed

  • SHA1

    fddd2b5e034f8524e4cb636a2af25a1a3f380836

  • SHA256

    d4359d882ff7b9a32a15c7f17a60b158dba11c46f959bff27282c67efe228c20

  • SHA512

    09aab2d3389f59007955493575f885dfb2dbe28b1081e7e662b3bc720072a6d1e1b779ef490736da5cb0b5b274ef29595477dcc0939338628b9d4f62dbdd7a2e

  • SSDEEP

    3072:SCGPVHzzgd2HPVVf9AebuLFfK9s7IAuXNgDkOcrSZ1gv9:Srak9gorf6XcrSQ

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      02299599.exe

    • Size

      135KB

    • MD5

      3b557b8787d9c3f9af5a57ae6a4232ed

    • SHA1

      fddd2b5e034f8524e4cb636a2af25a1a3f380836

    • SHA256

      d4359d882ff7b9a32a15c7f17a60b158dba11c46f959bff27282c67efe228c20

    • SHA512

      09aab2d3389f59007955493575f885dfb2dbe28b1081e7e662b3bc720072a6d1e1b779ef490736da5cb0b5b274ef29595477dcc0939338628b9d4f62dbdd7a2e

    • SSDEEP

      3072:SCGPVHzzgd2HPVVf9AebuLFfK9s7IAuXNgDkOcrSZ1gv9:Srak9gorf6XcrSQ

    Score
    6/10
    persistencebootkit

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks