Overview

overview

8

Static

static

1

e8116ac16a...d1.exe

windows7-x64

8

e8116ac16a...d1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e8116ac16ab20efc1f29841f355743d1.bin

  • Size

    4.2MB

  • Sample

    231121-drhvjace4y

  • MD5

    e8116ac16ab20efc1f29841f355743d1

  • SHA1

    f22381deec29d4686196f1e7a72223844f73b63e

  • SHA256

    2545b5160c56ec9f497676e722b42f885934690fa70dba0c5734ca7d7dba56b4

  • SHA512

    0e18600de20ce6406e5e82ebfbf8037604dc2ef956502625a68f1ef1f8f2ca1696332a7b5ea00ebdc519a7ff68a0384c6c6181d6aeb80be787ef4be65f3cf452

  • SSDEEP

    98304:U54Z69H/gO6/JTTI06297x8fiW0ngGJLRkNaskgRqc5cAFe6lWXQ25dx:sH/gO6/JTTP7x3nxiNasXverP

Score
8/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      e8116ac16ab20efc1f29841f355743d1.bin

    • Size

      4.2MB

    • MD5

      e8116ac16ab20efc1f29841f355743d1

    • SHA1

      f22381deec29d4686196f1e7a72223844f73b63e

    • SHA256

      2545b5160c56ec9f497676e722b42f885934690fa70dba0c5734ca7d7dba56b4

    • SHA512

      0e18600de20ce6406e5e82ebfbf8037604dc2ef956502625a68f1ef1f8f2ca1696332a7b5ea00ebdc519a7ff68a0384c6c6181d6aeb80be787ef4be65f3cf452

    • SSDEEP

      98304:U54Z69H/gO6/JTTI06297x8fiW0ngGJLRkNaskgRqc5cAFe6lWXQ25dx:sH/gO6/JTTP7x3nxiNasXverP

    Score
    8/10
    bootkitevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks