Overview

overview

6

Static

static

3

c9de00bff8...74.exe

windows7-x64

6

c9de00bff8...74.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9de00bff85fbc8985fa88136ace7acbabca43fc677ee44c2300ea841f106974

  • Size

    1.3MB

  • Sample

    230923-fz5qdaeg84

  • MD5

    758211320290031df63f75fc12481e98

  • SHA1

    7ef48b42f5604a626eb66fa762c6b17336219a86

  • SHA256

    c9de00bff85fbc8985fa88136ace7acbabca43fc677ee44c2300ea841f106974

  • SHA512

    547e135b4b2b8e517d9d4cb066aa33285273558d868f282d3958128cc7d1e550afa643cd1a9303b97d0b537a1ef632ad77605a5a372829c76a7b69f45218a2d2

  • SSDEEP

    12288:9+s0X/XiSHXyzAxRirZXrcZAIpYYLOI592La4Mxjq8ahJkk7MoZvIR5nWFpPoSbz:9+sIX7i0rcXoZAAYAO3rJNLvrbKawW

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      c9de00bff85fbc8985fa88136ace7acbabca43fc677ee44c2300ea841f106974

    • Size

      1.3MB

    • MD5

      758211320290031df63f75fc12481e98

    • SHA1

      7ef48b42f5604a626eb66fa762c6b17336219a86

    • SHA256

      c9de00bff85fbc8985fa88136ace7acbabca43fc677ee44c2300ea841f106974

    • SHA512

      547e135b4b2b8e517d9d4cb066aa33285273558d868f282d3958128cc7d1e550afa643cd1a9303b97d0b537a1ef632ad77605a5a372829c76a7b69f45218a2d2

    • SSDEEP

      12288:9+s0X/XiSHXyzAxRirZXrcZAIpYYLOI592La4Mxjq8ahJkk7MoZvIR5nWFpPoSbz:9+sIX7i0rcXoZAAYAO3rJNLvrbKawW

    Score
    6/10
    bootkitpersistence

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks