Overview

overview

7

Static

static

3

35c6d22716...d9.exe

windows7-x64

7

35c6d22716...d9.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    35c6d227166908987c659b459cfda729f9c52b92b1a01f25c8ca422bb1e4abd9

  • Size

    8.2MB

  • Sample

    230830-zknyvsab5x

  • MD5

    5db1614fe3fcc6a251c4169f8d1b9395

  • SHA1

    245b03297507ed6c7dd1110426b255e62c59af45

  • SHA256

    35c6d227166908987c659b459cfda729f9c52b92b1a01f25c8ca422bb1e4abd9

  • SHA512

    5ef0a48597b01e381874a7ffda52405356fd63749991c2b7f4187d726309a42e3f304ced3944e4618e59ef3e170b4e307c20f03951a6dec7a0fcd9da1cc0a24d

  • SSDEEP

    98304:8MoT3s/K6tySzCP22heHTasUn2KF7Lxndx3l9/Smy1LnwWAhZrk2zc8L0o/oo:OUt0402K/dhXRiOSI0ob

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      35c6d227166908987c659b459cfda729f9c52b92b1a01f25c8ca422bb1e4abd9

    • Size

      8.2MB

    • MD5

      5db1614fe3fcc6a251c4169f8d1b9395

    • SHA1

      245b03297507ed6c7dd1110426b255e62c59af45

    • SHA256

      35c6d227166908987c659b459cfda729f9c52b92b1a01f25c8ca422bb1e4abd9

    • SHA512

      5ef0a48597b01e381874a7ffda52405356fd63749991c2b7f4187d726309a42e3f304ced3944e4618e59ef3e170b4e307c20f03951a6dec7a0fcd9da1cc0a24d

    • SSDEEP

      98304:8MoT3s/K6tySzCP22heHTasUn2KF7Lxndx3l9/Smy1LnwWAhZrk2zc8L0o/oo:OUt0402K/dhXRiOSI0ob

    Score
    7/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks