Overview

overview

6

Static

static

3

876439546a...b2.exe

windows7-x64

6

876439546a...b2.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    876439546a245e645e0ca86ce787534e2ee210a413c071e4c19d2ef6507fb6b2

  • Size

    4.2MB

  • Sample

    231012-mxdx7sgb49

  • MD5

    0813d5f211a6630fddbf1781a6a63fd3

  • SHA1

    9ac99d51b6566062bdf1388f3a5888ebbf93094a

  • SHA256

    876439546a245e645e0ca86ce787534e2ee210a413c071e4c19d2ef6507fb6b2

  • SHA512

    b2ac49d0577453f42f58578f6d195c2991baaeca6a1ccdcce9ea01dd30c243581e729da39cd457f67721dc2b8dd665cd23e9fe8227ddfe2080f6312cb9276705

  • SSDEEP

    98304:qcPOrH3y3MUAYsIdGjBMDIlT6BQAYJ4GBsomIhylpYmoh:qmMk0jq0AIJ4r76IiFh

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      876439546a245e645e0ca86ce787534e2ee210a413c071e4c19d2ef6507fb6b2

    • Size

      4.2MB

    • MD5

      0813d5f211a6630fddbf1781a6a63fd3

    • SHA1

      9ac99d51b6566062bdf1388f3a5888ebbf93094a

    • SHA256

      876439546a245e645e0ca86ce787534e2ee210a413c071e4c19d2ef6507fb6b2

    • SHA512

      b2ac49d0577453f42f58578f6d195c2991baaeca6a1ccdcce9ea01dd30c243581e729da39cd457f67721dc2b8dd665cd23e9fe8227ddfe2080f6312cb9276705

    • SSDEEP

      98304:qcPOrH3y3MUAYsIdGjBMDIlT6BQAYJ4GBsomIhylpYmoh:qmMk0jq0AIJ4r76IiFh

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks