Overview

overview

6

Static

static

1

sogou_wubi_55d.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    sogou_wubi_55d.exe

  • Size

    40.7MB

  • Sample

    231005-lkvjraab6w

  • MD5

    39a14cf98ea94b0e3f9fa892152c929d

  • SHA1

    0915263777aff48a8e12287f7aa7da4da593a862

  • SHA256

    dfadb6d4cbf522398e0cb913c6837a402384cd201abda7f34152578b5a2166e0

  • SHA512

    39fe907f6c156ddda6a2c43eafb4190e6263dec37023e5dc5c1f2a5b4bb5e90adff70c6508c238cfe5f7b5de087fb520a1642c152d7f80bdc21f3920eb863593

  • SSDEEP

    786432:48Y5nztRpXQBGIUG53GuEBXZWgi6UMKohU29SJUkE5TVgnPNAIGFcW:48sBIRnoXZJiPMNhp9gEZaPNAWW

Score
6/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      sogou_wubi_55d.exe

    • Size

      40.7MB

    • MD5

      39a14cf98ea94b0e3f9fa892152c929d

    • SHA1

      0915263777aff48a8e12287f7aa7da4da593a862

    • SHA256

      dfadb6d4cbf522398e0cb913c6837a402384cd201abda7f34152578b5a2166e0

    • SHA512

      39fe907f6c156ddda6a2c43eafb4190e6263dec37023e5dc5c1f2a5b4bb5e90adff70c6508c238cfe5f7b5de087fb520a1642c152d7f80bdc21f3920eb863593

    • SSDEEP

      786432:48Y5nztRpXQBGIUG53GuEBXZWgi6UMKohU29SJUkE5TVgnPNAIGFcW:48sBIRnoXZJiPMNhp9gEZaPNAWW

    Score
    6/10
    bootkitdiscoveryevasionpersistencetrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks