Overview

overview

10

Static

static

1

0362caad7e...58.exe

windows7-x64

10

0362caad7e...58.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0362caad7e5b1bb567e51fbcf0e9fb58

  • Size

    47KB

  • Sample

    231225-d495jscda3

  • MD5

    0362caad7e5b1bb567e51fbcf0e9fb58

  • SHA1

    8bcc0719e3e9a5185dc35939622d6abf85d3af90

  • SHA256

    909c1ebaa13673fbf97a836556b9c17502419dc0bfe7b95f95767e054b6af3b1

  • SHA512

    5bb22aa7d1b490dfa9f805f788f22f90ae7ee85b2b4932e44cb2224d788c27e7097f9aa7110747d01abb4ac9c7f9031677b0ec9e437b175724794835e7ae2a9f

  • SSDEEP

    768:LWCm7h8GHNcMlsCEofcqgTT09Dh/c8io4jfAB17hoqZEwnCYNdrJw+Z3rTcggGy:ir8GHNrnEmbYjg17boYXrNF3LE

Score
10/10
bootkitpersistencespywarestealer

Malware Config

Targets

    • Target

      0362caad7e5b1bb567e51fbcf0e9fb58

    • Size

      47KB

    • MD5

      0362caad7e5b1bb567e51fbcf0e9fb58

    • SHA1

      8bcc0719e3e9a5185dc35939622d6abf85d3af90

    • SHA256

      909c1ebaa13673fbf97a836556b9c17502419dc0bfe7b95f95767e054b6af3b1

    • SHA512

      5bb22aa7d1b490dfa9f805f788f22f90ae7ee85b2b4932e44cb2224d788c27e7097f9aa7110747d01abb4ac9c7f9031677b0ec9e437b175724794835e7ae2a9f

    • SSDEEP

      768:LWCm7h8GHNcMlsCEofcqgTT09Dh/c8io4jfAB17hoqZEwnCYNdrJw+Z3rTcggGy:ir8GHNrnEmbYjg17boYXrNF3LE

    Score
    10/10
    bootkitpersistencespywarestealer

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks