Overview

overview

6

Static

static

3

b0037c1e5b...2d.exe

windows7-x64

6

b0037c1e5b...2d.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0037c1e5be7b7736498679b44439e5062a6126e10ddc8e3a8acbc638e5b222d

  • Size

    4.2MB

  • Sample

    231120-1v8axsad87

  • MD5

    ad794c57d0acfa24f248619d668fe9bd

  • SHA1

    8abd5653a21a88e222a7030251eb65e021ae4074

  • SHA256

    b0037c1e5be7b7736498679b44439e5062a6126e10ddc8e3a8acbc638e5b222d

  • SHA512

    23f4f525f6711b84f0a384734487ccc26f4084cb43cff61dcf558b1a85d42c9fb76bc7ac6e1c0cd3d71c2b62f748240d12626099de5e376f859ad354f4c7f725

  • SSDEEP

    98304:2ILqEzQUQaxNU7+JpbXFjWKz6zrD/ty4GShylpYm:vqkvZx2ipbXVWKzgfly4XIi

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      b0037c1e5be7b7736498679b44439e5062a6126e10ddc8e3a8acbc638e5b222d

    • Size

      4.2MB

    • MD5

      ad794c57d0acfa24f248619d668fe9bd

    • SHA1

      8abd5653a21a88e222a7030251eb65e021ae4074

    • SHA256

      b0037c1e5be7b7736498679b44439e5062a6126e10ddc8e3a8acbc638e5b222d

    • SHA512

      23f4f525f6711b84f0a384734487ccc26f4084cb43cff61dcf558b1a85d42c9fb76bc7ac6e1c0cd3d71c2b62f748240d12626099de5e376f859ad354f4c7f725

    • SSDEEP

      98304:2ILqEzQUQaxNU7+JpbXFjWKz6zrD/ty4GShylpYm:vqkvZx2ipbXVWKzgfly4XIi

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks