Overview

overview

7

Static

static

3

385022efd9...60.exe

windows7-x64

7

385022efd9...60.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    385022efd94741c7ff8797b8ebd98dfff0c6571cfcca1eae4463ad0b20cbab60

  • Size

    3.6MB

  • Sample

    231012-v6yyqsgg46

  • MD5

    220201e66d9294f95d1a3b0f20e317ab

  • SHA1

    f48175e0cbee0c42dacd07df370d812c4e0ed8c8

  • SHA256

    385022efd94741c7ff8797b8ebd98dfff0c6571cfcca1eae4463ad0b20cbab60

  • SHA512

    70119acb8f69cc65375d47aa62669f47c83e0c6edeeacde95df07b0d0afa2f69416ca5d0ebcecc532bc8f081799ef069df78ed0e4f1bfbf5ce117a4e7d0a35c3

  • SSDEEP

    49152:g08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRZnm7LBS:g08vdsGaQNgS1C6eTnuFzqTZ

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      385022efd94741c7ff8797b8ebd98dfff0c6571cfcca1eae4463ad0b20cbab60

    • Size

      3.6MB

    • MD5

      220201e66d9294f95d1a3b0f20e317ab

    • SHA1

      f48175e0cbee0c42dacd07df370d812c4e0ed8c8

    • SHA256

      385022efd94741c7ff8797b8ebd98dfff0c6571cfcca1eae4463ad0b20cbab60

    • SHA512

      70119acb8f69cc65375d47aa62669f47c83e0c6edeeacde95df07b0d0afa2f69416ca5d0ebcecc532bc8f081799ef069df78ed0e4f1bfbf5ce117a4e7d0a35c3

    • SSDEEP

      49152:g08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRZnm7LBS:g08vdsGaQNgS1C6eTnuFzqTZ

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks