Overview

overview

7

Static

static

7

abbae8fbe4...aa.exe

windows7-x64

7

abbae8fbe4...aa.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    abbae8fbe49687822589fd0a9203a88c0a9a4cf1f800e41ccd91d2ec93b8b6aa

  • Size

    6.7MB

  • Sample

    230930-dwb8jshg57

  • MD5

    e2f29fcc0e70ef9f0761320f7cf77ed9

  • SHA1

    6bd05404f755a6daff1a759cea05ddf9d20feb10

  • SHA256

    abbae8fbe49687822589fd0a9203a88c0a9a4cf1f800e41ccd91d2ec93b8b6aa

  • SHA512

    c687da08a0531adb0ea7c93b47a7e3d2ebfab206f148607d44a3d335759f440e813ea906d89ab866d450a222ca309237ec9a77c229c0fe454844916dbf63fffc

  • SSDEEP

    196608:thUlEK24WnALlalzuVvny9g/99j3h9sl5T:i2TYuzuNny9g/X3hOl5T

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      abbae8fbe49687822589fd0a9203a88c0a9a4cf1f800e41ccd91d2ec93b8b6aa

    • Size

      6.7MB

    • MD5

      e2f29fcc0e70ef9f0761320f7cf77ed9

    • SHA1

      6bd05404f755a6daff1a759cea05ddf9d20feb10

    • SHA256

      abbae8fbe49687822589fd0a9203a88c0a9a4cf1f800e41ccd91d2ec93b8b6aa

    • SHA512

      c687da08a0531adb0ea7c93b47a7e3d2ebfab206f148607d44a3d335759f440e813ea906d89ab866d450a222ca309237ec9a77c229c0fe454844916dbf63fffc

    • SSDEEP

      196608:thUlEK24WnALlalzuVvny9g/99j3h9sl5T:i2TYuzuNny9g/X3hOl5T

    Score
    7/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks