Overview

overview

7

Static

static

7

8f7e306938...0a.exe

windows7-x64

7

8f7e306938...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f7e306938103bc66b6b5c2d2a017f2f25102be6a27206679620bc016ae1dd0a

  • Size

    13.1MB

  • Sample

    230920-cf43ysfe53

  • MD5

    5c3f124709ab3be5108fd7f401703d82

  • SHA1

    4c1a48bc3ec105a7f2b1e0987e79a105ba8ba499

  • SHA256

    8f7e306938103bc66b6b5c2d2a017f2f25102be6a27206679620bc016ae1dd0a

  • SHA512

    459244323934d71f059f7737dfda81a3982b7cb9c18d417d4cc8b6e54373c13e3f1dd233db4e0b51b3d66a280a3290272d67c96fbb66630aeb47dab922cc6e27

  • SSDEEP

    393216:sbpMALVoibbfL6TizjQ2rdWzewngla5FhqGkorJbk2fb5+x:sbp7Joibb8SjrdWKwncgjJI6b5G

Score
7/10
bootkitpersistenceupxvmprotect

Malware Config

Targets

    • Target

      8f7e306938103bc66b6b5c2d2a017f2f25102be6a27206679620bc016ae1dd0a

    • Size

      13.1MB

    • MD5

      5c3f124709ab3be5108fd7f401703d82

    • SHA1

      4c1a48bc3ec105a7f2b1e0987e79a105ba8ba499

    • SHA256

      8f7e306938103bc66b6b5c2d2a017f2f25102be6a27206679620bc016ae1dd0a

    • SHA512

      459244323934d71f059f7737dfda81a3982b7cb9c18d417d4cc8b6e54373c13e3f1dd233db4e0b51b3d66a280a3290272d67c96fbb66630aeb47dab922cc6e27

    • SSDEEP

      393216:sbpMALVoibbfL6TizjQ2rdWzewngla5FhqGkorJbk2fb5+x:sbp7Joibb8SjrdWKwncgjJI6b5G

    Score
    7/10
    bootkitpersistenceupxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks