Overview

overview

7

Static

static

1

tmp.exe

windows7-x64

7

tmp.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    972KB

  • Sample

    230819-pb56nsbb4x

  • MD5

    229622bfa52f2f012185be9e13488389

  • SHA1

    4b74de0100bcc2f85572bcfcc8266ae3a6719c61

  • SHA256

    9e9a4ee77e04e13cede4b61ec3372066de5242d4f4892d1a62be14016d71a98a

  • SHA512

    98201627b611d1baf5f6426513f548f6392f13781b53661bf57f3baafff2a2f76911c09bdd45aa65b53418f64f64e66d6507a3088311ea237b88c4b72fe41d8c

  • SSDEEP

    12288:bj/SSNuKfMAAlbdRHF7uzlpfqZC+/7VNJkUyj2+7wWuXNYNBRjvfn3R2W:bjB2DNdRHAjqkgtQu9Md

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      tmp

    • Size

      972KB

    • MD5

      229622bfa52f2f012185be9e13488389

    • SHA1

      4b74de0100bcc2f85572bcfcc8266ae3a6719c61

    • SHA256

      9e9a4ee77e04e13cede4b61ec3372066de5242d4f4892d1a62be14016d71a98a

    • SHA512

      98201627b611d1baf5f6426513f548f6392f13781b53661bf57f3baafff2a2f76911c09bdd45aa65b53418f64f64e66d6507a3088311ea237b88c4b72fe41d8c

    • SSDEEP

      12288:bj/SSNuKfMAAlbdRHF7uzlpfqZC+/7VNJkUyj2+7wWuXNYNBRjvfn3R2W:bjB2DNdRHAjqkgtQu9Md

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks