Overview

overview

10

Static

static

3

0a4d41d129...0d.exe

windows7-x64

10

0a4d41d129...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a4d41d12926391b785b0086ee03440d

  • Size

    432KB

  • Sample

    231219-mp8gvaebbq

  • MD5

    0a4d41d12926391b785b0086ee03440d

  • SHA1

    c99a8c4c3f54458ec180d00130851cd69078ce96

  • SHA256

    ba77471fabb7172e44ed7f9fff65f75419cac8034b264e3e8c0a3ef759d06245

  • SHA512

    966551f3ce21290b6e15beb85914b9ede9858c4eff9fce794cbb0eee489534e3932d6000847882790ff265caa0164d16517ab44b4756e267a0b55719470507e7

  • SSDEEP

    6144:XXW2L8fcIRN5HcA4gy+DSrIpq3dJ+MYfn+aC1meyUGimMzAfABoU97:nL8kIRfyL2MYfW1meyUGpcAoBv7

Score
10/10
bootkitevasionpersistence

Malware Config

Targets

    • Target

      0a4d41d12926391b785b0086ee03440d

    • Size

      432KB

    • MD5

      0a4d41d12926391b785b0086ee03440d

    • SHA1

      c99a8c4c3f54458ec180d00130851cd69078ce96

    • SHA256

      ba77471fabb7172e44ed7f9fff65f75419cac8034b264e3e8c0a3ef759d06245

    • SHA512

      966551f3ce21290b6e15beb85914b9ede9858c4eff9fce794cbb0eee489534e3932d6000847882790ff265caa0164d16517ab44b4756e267a0b55719470507e7

    • SSDEEP

      6144:XXW2L8fcIRN5HcA4gy+DSrIpq3dJ+MYfn+aC1meyUGimMzAfABoU97:nL8kIRfyL2MYfW1meyUGpcAoBv7

    Score
    10/10
    bootkitevasionpersistence

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks