Overview

overview

7

Static

static

7

1975b30f7b...16.exe

windows7-x64

7

1975b30f7b...16.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1975b30f7b744be3fb2893d4664d6b16

  • Size

    203KB

  • Sample

    231224-3fa3zseba7

  • MD5

    1975b30f7b744be3fb2893d4664d6b16

  • SHA1

    e084fb2b3e546f53c4e005fbadc2b79976a59213

  • SHA256

    d003892f0eaab4851ab2e8c5c0c0eb7c0578eb47681ae46cf5a6b6e4d3ff1665

  • SHA512

    5d5835bdaf4db70d8b9d08b470461f23b1f303950c66f6d332fd172ab4524950ebeab9b81c789bd48f315c60c18e05dd6a3d954df9582b0359891ab59b81f535

  • SSDEEP

    6144:chUFT6hioy8QKcsHGfsIiQ7boFHWip7nSzv+OwS:oUFT6hiTiQ/oFHWiRncpJ

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      1975b30f7b744be3fb2893d4664d6b16

    • Size

      203KB

    • MD5

      1975b30f7b744be3fb2893d4664d6b16

    • SHA1

      e084fb2b3e546f53c4e005fbadc2b79976a59213

    • SHA256

      d003892f0eaab4851ab2e8c5c0c0eb7c0578eb47681ae46cf5a6b6e4d3ff1665

    • SHA512

      5d5835bdaf4db70d8b9d08b470461f23b1f303950c66f6d332fd172ab4524950ebeab9b81c789bd48f315c60c18e05dd6a3d954df9582b0359891ab59b81f535

    • SSDEEP

      6144:chUFT6hioy8QKcsHGfsIiQ7boFHWip7nSzv+OwS:oUFT6hiTiQ/oFHWiRncpJ

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks