Overview

overview

8

Static

static

1

Todesk_437778217.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Todesk_437778217.exe

  • Size

    4.9MB

  • Sample

    230628-dsbgvagb77

  • MD5

    b04bf24c595cc63b27fc383e4ef8cf08

  • SHA1

    c0339e7ad57976cde8f3c7b892081a13b30b9848

  • SHA256

    7e955543f89c1cdddf7f507be671f7a5ce976cd59d80e12383ead2dd655ef2e3

  • SHA512

    0e5394da301d069dacfa8e060136241e9cc7a19148f67b1bbc660ebb1a65dbac9c0a7e512812cf5f205a95905c45d97aebfd4b6cb20f5e7ed2f9ba3098515180

  • SSDEEP

    98304:n33U6vME7QCEmCvAPsxgaLna/bxNrf4cUMGOnk6LPVkoVc0KR4jLqmWaJdVC/y:0ohiBvAPKgKndcUMzFPxtDFr

Score
8/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      Todesk_437778217.exe

    • Size

      4.9MB

    • MD5

      b04bf24c595cc63b27fc383e4ef8cf08

    • SHA1

      c0339e7ad57976cde8f3c7b892081a13b30b9848

    • SHA256

      7e955543f89c1cdddf7f507be671f7a5ce976cd59d80e12383ead2dd655ef2e3

    • SHA512

      0e5394da301d069dacfa8e060136241e9cc7a19148f67b1bbc660ebb1a65dbac9c0a7e512812cf5f205a95905c45d97aebfd4b6cb20f5e7ed2f9ba3098515180

    • SSDEEP

      98304:n33U6vME7QCEmCvAPsxgaLna/bxNrf4cUMGOnk6LPVkoVc0KR4jLqmWaJdVC/y:0ohiBvAPKgKndcUMzFPxtDFr

    Score
    8/10
    bootkitdiscoverypersistence

    • Downloads MZ/PE file

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

1
T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks