Overview

overview

6

Static

static

3

2094643eb8...7a.exe

windows7-x64

6

2094643eb8...7a.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    2094643eb8c43749b052e18d6c8ef07a

  • Size

    505KB

  • Sample

    231225-bwx4xaacel

  • MD5

    2094643eb8c43749b052e18d6c8ef07a

  • SHA1

    e0deb7b1cd9639e419235246fee95c9e766fdbc8

  • SHA256

    abf122bfbad8ae0c006b26de16cd883fd61a1ebcbff65ff464851ac8170841fd

  • SHA512

    4fcdd6a299a10ee5320073d173d583e21e9fbb529e027adc481d03146b9c2761898bb0c4070757a6f0d13deaefe825582fbb9242e79dbc569f87467701cb2059

  • SSDEEP

    6144:gxd0r+zwr2rNy8daL6ku/GWSHaXCMMN+3rhmBF9Z9wBjufk41SWJyuWETo:EdHsr2rNv6aGTSIF9YU84IfuXo

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      2094643eb8c43749b052e18d6c8ef07a

    • Size

      505KB

    • MD5

      2094643eb8c43749b052e18d6c8ef07a

    • SHA1

      e0deb7b1cd9639e419235246fee95c9e766fdbc8

    • SHA256

      abf122bfbad8ae0c006b26de16cd883fd61a1ebcbff65ff464851ac8170841fd

    • SHA512

      4fcdd6a299a10ee5320073d173d583e21e9fbb529e027adc481d03146b9c2761898bb0c4070757a6f0d13deaefe825582fbb9242e79dbc569f87467701cb2059

    • SSDEEP

      6144:gxd0r+zwr2rNy8daL6ku/GWSHaXCMMN+3rhmBF9Z9wBjufk41SWJyuWETo:EdHsr2rNv6aGTSIF9YU84IfuXo

    Score
    6/10
    bootkitpersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks