Overview

overview

7

Static

static

7

d2f3b5b939...16.exe

windows7-x64

7

d2f3b5b939...16.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d2f3b5b939a8c7d48bb626f77ecfdae326c9f41299eac5c92be09ed75fa0a816

  • Size

    7.7MB

  • Sample

    231012-m9ys5sfa4s

  • MD5

    a913038998b839d25ffe02d788c1d156

  • SHA1

    7bb7f2c2af971915cec03a06008db7bf79bb50f3

  • SHA256

    d2f3b5b939a8c7d48bb626f77ecfdae326c9f41299eac5c92be09ed75fa0a816

  • SHA512

    fa0abce8ed79bdf4547db3290cc1bc1b4a155156cb97e57c782f9c3fee1b68817e0e69a9ac08e69524134bc7a031cccf35ba1c690ac68c10c80ea944fb241bf5

  • SSDEEP

    196608:Da1psCYl7rfqKMd2LzCczF8Tj2UgxwwuKAY+8tSwBmOy:e1psCSwwZs3FzOBv

Score
7/10
bootkitpersistencevmprotect

Malware Config

Targets

    • Target

      d2f3b5b939a8c7d48bb626f77ecfdae326c9f41299eac5c92be09ed75fa0a816

    • Size

      7.7MB

    • MD5

      a913038998b839d25ffe02d788c1d156

    • SHA1

      7bb7f2c2af971915cec03a06008db7bf79bb50f3

    • SHA256

      d2f3b5b939a8c7d48bb626f77ecfdae326c9f41299eac5c92be09ed75fa0a816

    • SHA512

      fa0abce8ed79bdf4547db3290cc1bc1b4a155156cb97e57c782f9c3fee1b68817e0e69a9ac08e69524134bc7a031cccf35ba1c690ac68c10c80ea944fb241bf5

    • SSDEEP

      196608:Da1psCYl7rfqKMd2LzCczF8Tj2UgxwwuKAY+8tSwBmOy:e1psCSwwZs3FzOBv

    Score
    7/10
    bootkitpersistencevmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks