Overview

overview

8

Static

static

3

29c612dca4...eb.exe

windows7-x64

8

29c612dca4...eb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29c612dca4e2d302445a71ddc283b5eb

  • Size

    366KB

  • Sample

    231225-s14kxsaha2

  • MD5

    29c612dca4e2d302445a71ddc283b5eb

  • SHA1

    e54e0c0dc33194a4647dfafefc0595ed8caa03b6

  • SHA256

    33d8601ed2e3d9c5d7fad96366f151c59688ab0b06c76b79abff5e29f7527e8d

  • SHA512

    2605c3730b42140d7e0485feb3010ae96a73f4bbde79c64ad1ecf743c5798b864348767c761e4db10d1a2d222ccf1550024e2c56da8f31e07c9b9499b51fc7ed

  • SSDEEP

    6144:GC3+XHmuPepeqif4ro9DC6VaZfh/m8hIHnBiXmY:SXHmuPepeXfOo9DC6gZpm82HC7

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      29c612dca4e2d302445a71ddc283b5eb

    • Size

      366KB

    • MD5

      29c612dca4e2d302445a71ddc283b5eb

    • SHA1

      e54e0c0dc33194a4647dfafefc0595ed8caa03b6

    • SHA256

      33d8601ed2e3d9c5d7fad96366f151c59688ab0b06c76b79abff5e29f7527e8d

    • SHA512

      2605c3730b42140d7e0485feb3010ae96a73f4bbde79c64ad1ecf743c5798b864348767c761e4db10d1a2d222ccf1550024e2c56da8f31e07c9b9499b51fc7ed

    • SSDEEP

      6144:GC3+XHmuPepeqif4ro9DC6VaZfh/m8hIHnBiXmY:SXHmuPepeXfOo9DC6gZpm82HC7

    Score
    8/10
    bootkitpersistence

    • Sets DLL path for service in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks