Overview

overview

6

Static

static

3

d0c1fb6ab4...d6.exe

windows7-x64

6

d0c1fb6ab4...d6.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0c1fb6ab4ede0501a801b509909bcdf5e8595034c78906670623503fe89fbd6

  • Size

    4.2MB

  • Sample

    231007-tcrf5adf2y

  • MD5

    e48c7703b105b5a42208e77fe4ca6f0b

  • SHA1

    f11b49864c3024c820d4f5c9ef9327ce1581268c

  • SHA256

    d0c1fb6ab4ede0501a801b509909bcdf5e8595034c78906670623503fe89fbd6

  • SHA512

    10557a220a3a1b9059c572d9e8f99aed3221ed5587001b1ccfd65afa15426dee8c4a515ab5fef483850eab3b13ff6871c254bc0c3a50f639f5a8ba51980916f0

  • SSDEEP

    98304:3vNx69m78P7+d/pZSVsNHdbRDGLsLhylpYmZL:2Y7JjT99IiwL

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      d0c1fb6ab4ede0501a801b509909bcdf5e8595034c78906670623503fe89fbd6

    • Size

      4.2MB

    • MD5

      e48c7703b105b5a42208e77fe4ca6f0b

    • SHA1

      f11b49864c3024c820d4f5c9ef9327ce1581268c

    • SHA256

      d0c1fb6ab4ede0501a801b509909bcdf5e8595034c78906670623503fe89fbd6

    • SHA512

      10557a220a3a1b9059c572d9e8f99aed3221ed5587001b1ccfd65afa15426dee8c4a515ab5fef483850eab3b13ff6871c254bc0c3a50f639f5a8ba51980916f0

    • SSDEEP

      98304:3vNx69m78P7+d/pZSVsNHdbRDGLsLhylpYmZL:2Y7JjT99IiwL

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks