Overview

overview

6

Static

static

3

1f5564f3ee...11.exe

windows7-x64

6

1f5564f3ee...11.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f5564f3eee5b0cbad816dc0c2745c4f45fe73006467cc5a64a91f5ed3f17c11

  • Size

    4.2MB

  • Sample

    231118-cayzragh53

  • MD5

    8cd5b65479e602c8b04addb6e41c6903

  • SHA1

    502ec491d29f15a2c27e91197877865199767fde

  • SHA256

    1f5564f3eee5b0cbad816dc0c2745c4f45fe73006467cc5a64a91f5ed3f17c11

  • SHA512

    76f05bd90fafab9535404e41d0eba95fc3f7bb54ce7e70448399241aa3fd3d3d84475289b98165c17d8cf3fc739a233ab7f96f327cfa341273e882a9b0e13342

  • SSDEEP

    98304:6pZRdIeI0XuTjB/12Ez8yH+U8fZPOjUOVhylpYm:IdG0XuTN/HKGjfIi

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      1f5564f3eee5b0cbad816dc0c2745c4f45fe73006467cc5a64a91f5ed3f17c11

    • Size

      4.2MB

    • MD5

      8cd5b65479e602c8b04addb6e41c6903

    • SHA1

      502ec491d29f15a2c27e91197877865199767fde

    • SHA256

      1f5564f3eee5b0cbad816dc0c2745c4f45fe73006467cc5a64a91f5ed3f17c11

    • SHA512

      76f05bd90fafab9535404e41d0eba95fc3f7bb54ce7e70448399241aa3fd3d3d84475289b98165c17d8cf3fc739a233ab7f96f327cfa341273e882a9b0e13342

    • SSDEEP

      98304:6pZRdIeI0XuTjB/12Ez8yH+U8fZPOjUOVhylpYm:IdG0XuTN/HKGjfIi

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks