Overview

overview

7

Static

static

7

4d966cda69...3e.exe

windows7-x64

7

4d966cda69...3e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e

  • Size

    15.6MB

  • Sample

    230816-jwbjxaaf6v

  • MD5

    e1dff9e42c375d80285a304c170d3547

  • SHA1

    5589394db60420b1f0c705c2702cb75ff3eb115b

  • SHA256

    4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e

  • SHA512

    b72f09369e36ba74d52715ba9dd06b1fcf23db3aa52d84ee7fa537e9b0045481947941c7073d4b4124e9e69d9c8e6032fbb4eface90b541a4741a9add8a49194

  • SSDEEP

    393216:8sKhx5c+mJ4gFJBef1FdX8BELMuTuWjV4qkzS/o1:8d6X4gFJcfNX8ANJk11

Score
7/10
bootkitpersistenceupxvmprotect

Malware Config

Targets

    • Target

      4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e

    • Size

      15.6MB

    • MD5

      e1dff9e42c375d80285a304c170d3547

    • SHA1

      5589394db60420b1f0c705c2702cb75ff3eb115b

    • SHA256

      4d966cda6915099e786227f4b45b54061a5c812d60b928e31f6adb0c31673d3e

    • SHA512

      b72f09369e36ba74d52715ba9dd06b1fcf23db3aa52d84ee7fa537e9b0045481947941c7073d4b4124e9e69d9c8e6032fbb4eface90b541a4741a9add8a49194

    • SSDEEP

      393216:8sKhx5c+mJ4gFJBef1FdX8BELMuTuWjV4qkzS/o1:8d6X4gFJcfNX8ANJk11

    Score
    7/10
    bootkitpersistenceupxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks