Overview

overview

7

Static

static

7

011223a2de...8e.exe

windows7-x64

7

011223a2de...8e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    011223a2def12f0a2d3a4829ddf75b8e

  • Size

    321KB

  • Sample

    231225-dcmvyadfdk

  • MD5

    011223a2def12f0a2d3a4829ddf75b8e

  • SHA1

    50a983eaf45bda7a242a627cd5786d92914cb7d2

  • SHA256

    8fe2b3c984ce2cb09dd3f64549138b34d6bbfcba6aaf8b9328a2492a8d18b49a

  • SHA512

    2c123a6139a5f350196f10fa09c211c89c2850c3a8278762c2624e6d7f30383c43580c21e9f67c8b1bdd8aa550eb09aa27f1221f74dcf66d36fd01397b40dfc4

  • SSDEEP

    6144:A+9m2P7CqfAh8EfNiApv9TFLBykEsJDEDa/vRt6RYSWI1UoUoVxqO4lC:CCgh8EfMAR9fykEsJlvRtexWI1UBjlC

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      011223a2def12f0a2d3a4829ddf75b8e

    • Size

      321KB

    • MD5

      011223a2def12f0a2d3a4829ddf75b8e

    • SHA1

      50a983eaf45bda7a242a627cd5786d92914cb7d2

    • SHA256

      8fe2b3c984ce2cb09dd3f64549138b34d6bbfcba6aaf8b9328a2492a8d18b49a

    • SHA512

      2c123a6139a5f350196f10fa09c211c89c2850c3a8278762c2624e6d7f30383c43580c21e9f67c8b1bdd8aa550eb09aa27f1221f74dcf66d36fd01397b40dfc4

    • SSDEEP

      6144:A+9m2P7CqfAh8EfNiApv9TFLBykEsJDEDa/vRt6RYSWI1UoUoVxqO4lC:CCgh8EfMAR9fykEsJlvRtexWI1UBjlC

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks