Overview

overview

7

Static

static

3

nfLauncher.exe

windows10-2004-x64

7

Resubmissions

23/09/2023, 09:41

230923-lnz9eaec2x 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    nfLauncher.exe

  • Size

    12.8MB

  • Sample

    230923-lnz9eaec2x

  • MD5

    f4f7663fb64780988e5d8b63ee2dad6b

  • SHA1

    c1ea790c9932327ae9f27680d36f54ab9288965b

  • SHA256

    2b8df62a285264edd57e7c5c440b16fa702915d7eb11a2191556ec03a782ea95

  • SHA512

    a746814154d1bf9aa286f60609038304876a298b8442a7082528e975a26745d918d0ae079382579ffe65f007c1d99fc5e22b241ab3e117d37a27aad5b50dfede

  • SSDEEP

    393216:GP4Ufrifm/ULQLJy89BoFsdT3kE4DV4wj:GAs+f6UsLo89BoFG3x4DV/j

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      nfLauncher.exe

    • Size

      12.8MB

    • MD5

      f4f7663fb64780988e5d8b63ee2dad6b

    • SHA1

      c1ea790c9932327ae9f27680d36f54ab9288965b

    • SHA256

      2b8df62a285264edd57e7c5c440b16fa702915d7eb11a2191556ec03a782ea95

    • SHA512

      a746814154d1bf9aa286f60609038304876a298b8442a7082528e975a26745d918d0ae079382579ffe65f007c1d99fc5e22b241ab3e117d37a27aad5b50dfede

    • SSDEEP

      393216:GP4Ufrifm/ULQLJy89BoFsdT3kE4DV4wj:GAs+f6UsLo89BoFG3x4DV/j

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks