Overview

overview

6

Static

static

3

661d554837...b7.exe

windows7-x64

6

661d554837...b7.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    661d5548375525de0c292f9d9dea6427e60741b7b0c97e9cbc23df19ec9d49b7

  • Size

    4.2MB

  • Sample

    231008-w65a7ahe75

  • MD5

    1d3dda933df19d3a53925dee1ae6b107

  • SHA1

    2b17557894b22db13f81a2198f2a2b1cbf19b0be

  • SHA256

    661d5548375525de0c292f9d9dea6427e60741b7b0c97e9cbc23df19ec9d49b7

  • SHA512

    e5a4a74e8e4b98803c072e57936bf34e32e9ba93810bd7c9863dee1242fe9f927c32dc7dc2b8a41fbd62e8bd49e6a83d674b10036cc49c9362f3bbf56920bcec

  • SSDEEP

    98304:LK1EquskRRCP6wfqQa42yfRE0rEHDpvChylpYmB1:QIRRCiQqn43N4HB0IiY1

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      661d5548375525de0c292f9d9dea6427e60741b7b0c97e9cbc23df19ec9d49b7

    • Size

      4.2MB

    • MD5

      1d3dda933df19d3a53925dee1ae6b107

    • SHA1

      2b17557894b22db13f81a2198f2a2b1cbf19b0be

    • SHA256

      661d5548375525de0c292f9d9dea6427e60741b7b0c97e9cbc23df19ec9d49b7

    • SHA512

      e5a4a74e8e4b98803c072e57936bf34e32e9ba93810bd7c9863dee1242fe9f927c32dc7dc2b8a41fbd62e8bd49e6a83d674b10036cc49c9362f3bbf56920bcec

    • SSDEEP

      98304:LK1EquskRRCP6wfqQa42yfRE0rEHDpvChylpYmB1:QIRRCiQqn43N4HB0IiY1

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks