Overview

overview

6

Static

static

3

0b2df3e5bc...0b.exe

windows7-x64

6

0b2df3e5bc...0b.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b2df3e5bcabe9afab96dcfa96ba1c6844aedad3eafb376af7beaa265f0de30b

  • Size

    4.2MB

  • Sample

    231021-n1ffwafh97

  • MD5

    aeb38377af962e2a324ee715a83fcd14

  • SHA1

    90b78f6826860281dcbcf56e39dba0c26f622e65

  • SHA256

    0b2df3e5bcabe9afab96dcfa96ba1c6844aedad3eafb376af7beaa265f0de30b

  • SHA512

    5da79ae6b42b18159ea7a1a0f85e9f887ebaae7ffa4929911e9e03c528ec72e4b8f3b6020647f45a623b7aca36285b388a4eb67856c7f65ed170523704ae7fca

  • SSDEEP

    98304:bpe2uEdtmnXX5Q+K417mI2ZUL5AmlT1mU9HHeYVfhylpYmsO:sMts79eUL5D9119Hx5IiFO

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      0b2df3e5bcabe9afab96dcfa96ba1c6844aedad3eafb376af7beaa265f0de30b

    • Size

      4.2MB

    • MD5

      aeb38377af962e2a324ee715a83fcd14

    • SHA1

      90b78f6826860281dcbcf56e39dba0c26f622e65

    • SHA256

      0b2df3e5bcabe9afab96dcfa96ba1c6844aedad3eafb376af7beaa265f0de30b

    • SHA512

      5da79ae6b42b18159ea7a1a0f85e9f887ebaae7ffa4929911e9e03c528ec72e4b8f3b6020647f45a623b7aca36285b388a4eb67856c7f65ed170523704ae7fca

    • SSDEEP

      98304:bpe2uEdtmnXX5Q+K417mI2ZUL5AmlT1mU9HHeYVfhylpYmsO:sMts79eUL5D9119Hx5IiFO

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks