Overview

overview

7

Static

static

7

0df7c7030d...5f.exe

windows7-x64

7

0df7c7030d...5f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0df7c7030d60d86a6383d11574632b5f

  • Size

    234KB

  • Sample

    231224-ya8d3scdbj

  • MD5

    0df7c7030d60d86a6383d11574632b5f

  • SHA1

    31355066c748caa7c0a90fa58782ab8bcb2cbe74

  • SHA256

    49f012367a9ad5909aa4aad5ddf28cdbb7e1ba6d7d1c1c6ba1470f72def5fd88

  • SHA512

    eaf9136d136edf74077c048749e0f3fc45d00ba18c94a87b47a2843a8e69b4190f1cf56c0fb6f151d0920fe4727324e335ea49bed939120d57721199d000dbac

  • SSDEEP

    6144:lmAyHeQ86BpSRgqMQQ3dFwCNpT7ERPDeUCTdqJ9K9tJ:7336BgiqMQQ3dFPDTUKUCTdqJ9K9tJ

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0df7c7030d60d86a6383d11574632b5f

    • Size

      234KB

    • MD5

      0df7c7030d60d86a6383d11574632b5f

    • SHA1

      31355066c748caa7c0a90fa58782ab8bcb2cbe74

    • SHA256

      49f012367a9ad5909aa4aad5ddf28cdbb7e1ba6d7d1c1c6ba1470f72def5fd88

    • SHA512

      eaf9136d136edf74077c048749e0f3fc45d00ba18c94a87b47a2843a8e69b4190f1cf56c0fb6f151d0920fe4727324e335ea49bed939120d57721199d000dbac

    • SSDEEP

      6144:lmAyHeQ86BpSRgqMQQ3dFwCNpT7ERPDeUCTdqJ9K9tJ:7336BgiqMQQ3dFPDTUKUCTdqJ9K9tJ

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks