Overview

overview

7

Static

static

7

647bae5b3b...57.exe

windows7-x64

7

647bae5b3b...57.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    647bae5b3b42fde475a7b1db5eb8dd9e5072b17b9a5d62856c4cdeea2cd44257

  • Size

    11.6MB

  • Sample

    231013-xprt7sfe49

  • MD5

    f478395a093dff2b3bf5e837dda67f55

  • SHA1

    608c4e03d8d7c9ba6dc90aabb70fd5576bbf254d

  • SHA256

    647bae5b3b42fde475a7b1db5eb8dd9e5072b17b9a5d62856c4cdeea2cd44257

  • SHA512

    42badbe27a6aef19b435b8877c88767d9f1c45e775d81a01d44b87004b2865c4f4c6d1e5b26c816613be330370ada2f8521d5b7b6795e6d385d4c9010788d82a

  • SSDEEP

    196608:ltpHEGZla4YxmDuStYKQM4e1upVcZvQfffHQVWXFQ4T3kniKJzV/k6Mp48ehq:lthdsmiKue14VcZvyQVWXFQjniKJzV/e

Score
7/10
bootkitpersistenceupxvmprotect

Malware Config

Targets

    • Target

      647bae5b3b42fde475a7b1db5eb8dd9e5072b17b9a5d62856c4cdeea2cd44257

    • Size

      11.6MB

    • MD5

      f478395a093dff2b3bf5e837dda67f55

    • SHA1

      608c4e03d8d7c9ba6dc90aabb70fd5576bbf254d

    • SHA256

      647bae5b3b42fde475a7b1db5eb8dd9e5072b17b9a5d62856c4cdeea2cd44257

    • SHA512

      42badbe27a6aef19b435b8877c88767d9f1c45e775d81a01d44b87004b2865c4f4c6d1e5b26c816613be330370ada2f8521d5b7b6795e6d385d4c9010788d82a

    • SSDEEP

      196608:ltpHEGZla4YxmDuStYKQM4e1upVcZvQfffHQVWXFQ4T3kniKJzV/k6Mp48ehq:lthdsmiKue14VcZvyQVWXFQjniKJzV/e

    Score
    7/10
    bootkitpersistenceupxvmprotect

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks