Overview

overview

7

Static

static

3

7a9e8764b9...24.exe

windows7-x64

7

7a9e8764b9...24.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7a9e8764b9469763c0d83f672b46ab66074b8d5ff75d40715648bfc19f719024

  • Size

    4.6MB

  • Sample

    230808-vq1sdsfh6s

  • MD5

    d5bd22840ac6f164c95f5119521f688f

  • SHA1

    3783bcac32478a9839f5b9801791621eb1f6d282

  • SHA256

    7a9e8764b9469763c0d83f672b46ab66074b8d5ff75d40715648bfc19f719024

  • SHA512

    64e684feb5bf87d174903325cc5ee3449c60141194f3dcd451a644ddb0af0f62ae6d506aa89986db1e0e25cfb85d7367ea0aeb9ad111fdb14cd2379ccb4eb2d7

  • SSDEEP

    98304:RbbuXOLhjqEadfGUDOXiCUEw/RBzzR8hrAPiuxDSvAKvNO6vdnBY2DzilI:kowb+yAKRB+t7uxQ1sOm2Q

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      7a9e8764b9469763c0d83f672b46ab66074b8d5ff75d40715648bfc19f719024

    • Size

      4.6MB

    • MD5

      d5bd22840ac6f164c95f5119521f688f

    • SHA1

      3783bcac32478a9839f5b9801791621eb1f6d282

    • SHA256

      7a9e8764b9469763c0d83f672b46ab66074b8d5ff75d40715648bfc19f719024

    • SHA512

      64e684feb5bf87d174903325cc5ee3449c60141194f3dcd451a644ddb0af0f62ae6d506aa89986db1e0e25cfb85d7367ea0aeb9ad111fdb14cd2379ccb4eb2d7

    • SSDEEP

      98304:RbbuXOLhjqEadfGUDOXiCUEw/RBzzR8hrAPiuxDSvAKvNO6vdnBY2DzilI:kowb+yAKRB+t7uxQ1sOm2Q

    Score
    7/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks