Overview

overview

8

Static

static

1

smart-defr...up.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    smart-defrag-setup.exe

  • Size

    14.5MB

  • Sample

    230806-y8h7vade5z

  • MD5

    21af9bfd50ec917ed99886fc8a471768

  • SHA1

    c1ca58858ef34730636f4e44821b9b7c8c2272f1

  • SHA256

    c121c877231f156f2ffc3b4f76b4aa97d7e3c57b6ab351ad8875b558e07729bc

  • SHA512

    7a198a8fcab6b14086aa4d48b5c59c794f3247a7fe63c0bfd6ec08c6972d82fec00869787e157cc319149d709c9d484208115c21f190e56f87c001c5abf57a91

  • SSDEEP

    393216:szNLub9UewzMcxssN4IzeGLclCIekaglrtBRs2kTCc7nrPSK:Subqey4Izen8fkZlrMCAnrPr

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      smart-defrag-setup.exe

    • Size

      14.5MB

    • MD5

      21af9bfd50ec917ed99886fc8a471768

    • SHA1

      c1ca58858ef34730636f4e44821b9b7c8c2272f1

    • SHA256

      c121c877231f156f2ffc3b4f76b4aa97d7e3c57b6ab351ad8875b558e07729bc

    • SHA512

      7a198a8fcab6b14086aa4d48b5c59c794f3247a7fe63c0bfd6ec08c6972d82fec00869787e157cc319149d709c9d484208115c21f190e56f87c001c5abf57a91

    • SSDEEP

      393216:szNLub9UewzMcxssN4IzeGLclCIekaglrtBRs2kTCc7nrPSK:Subqey4Izen8fkZlrMCAnrPr

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Drops file in Drivers directory

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks