Overview

overview

6

Static

static

3

4b6b488b50...a0.exe

windows7-x64

6

4b6b488b50...a0.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0

  • Size

    4.2MB

  • Sample

    231022-t4zxksaf4y

  • MD5

    5639539685b98886ba9bf4a6d0034f48

  • SHA1

    842e0b8203cf1aa00f0b72e820c7e1f26a558483

  • SHA256

    4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0

  • SHA512

    528053b07f795453f19e950f527b8b51b0e384c9ee2db864cef94b6aef8723e77f23ddbb93ef6809b09ce7612c82aff58a925b2e4f1e72b7ef233543e1f0ed54

  • SSDEEP

    98304:5RWaKd7E35+wRPzSpARsC1gTcUGsgztvgLoiJVhylpYms7:yaKaqSr1essgzOVJvIix7

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0

    • Size

      4.2MB

    • MD5

      5639539685b98886ba9bf4a6d0034f48

    • SHA1

      842e0b8203cf1aa00f0b72e820c7e1f26a558483

    • SHA256

      4b6b488b503f1aab45dd44516a6467428da8dcff21dd898c9a64cdbc1b26f9a0

    • SHA512

      528053b07f795453f19e950f527b8b51b0e384c9ee2db864cef94b6aef8723e77f23ddbb93ef6809b09ce7612c82aff58a925b2e4f1e72b7ef233543e1f0ed54

    • SSDEEP

      98304:5RWaKd7E35+wRPzSpARsC1gTcUGsgztvgLoiJVhylpYms7:yaKaqSr1essgzOVJvIix7

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks