Overview

overview

6

Static

static

3

Microsoft....on.exe

windows7-x64

6

Microsoft....on.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    13713a61c8391ddf1180bcf8810a99a7

  • Size

    130KB

  • Sample

    231225-kw1dpsfec5

  • MD5

    13713a61c8391ddf1180bcf8810a99a7

  • SHA1

    67fd17beb4436e4cf71c9dd6d9afadcc5a0c7e43

  • SHA256

    5bd9b48c214ceed0c61d702c01252a719c2cf6acb472d0a24f40bea58417c008

  • SHA512

    2e0ef08cc66c5282026d8dac45857ce1f83317024d94a298542f14d56374d7f8f6e2bad94b9e35e4a5a2e59f1d6213bf09c6617090dba165133c35496cee4b2c

  • SSDEEP

    3072:reA59gtUP7gvxeZByqPNzrYtPOQqIfzNMthVVmLODe:X7P4xScqP+BOzIfzNMpe

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      Microsoft.Office.Professional.key.code.generator.by.orion.exe

    • Size

      145KB

    • MD5

      57be841928efd3bed8140757fc50890a

    • SHA1

      333f0ef0372a6b12d8e7c51506467129b1e3793a

    • SHA256

      1322e6de2493b1d31d19aacacf17172fc4099cce539b4f21df9b48767a35d168

    • SHA512

      036d685e8255c02bde945cf0dc43380626e0092d93abdb42770aa0034091518bd71c4898727413a5ce0e418397aaafb277fe08bf3622652b3fca0ba15c02be13

    • SSDEEP

      3072:0OOUGhFs1StpKCN0Ru6DHR0WrVi36wVmm0Sz6CaSYFHf52Rn2e:ks1XC2ugHJ5ohgm0Sz6CE2dR

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks