Overview

overview

6

Static

static

3

2f4dc15ad9...30.exe

windows7-x64

6

2f4dc15ad9...30.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f4dc15ad94cbf5e13c7ae058aea7130

  • Size

    256KB

  • Sample

    231225-vkk5rabahp

  • MD5

    2f4dc15ad94cbf5e13c7ae058aea7130

  • SHA1

    5900401247344abdcda7356e6b8789eae27bb085

  • SHA256

    60f6639462ae4ba06b4df5d707835d322c6b830d95bb3ee247ee489a2eef30af

  • SHA512

    43ba59942fb43ed074dc828a3d45cf6d5bef868b8927dbfbbf080db4341ca47cb6e11541b03127f50d81bfeb6714dcf161fe5250e2f1fdef37d56a631df140cc

  • SSDEEP

    6144:9BO6+sNAi9KBPKXFlR4RLsHqIJEIy6do4VChvf:PosNL9sKVf4ZsKIJEIy6do4VChvf

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      2f4dc15ad94cbf5e13c7ae058aea7130

    • Size

      256KB

    • MD5

      2f4dc15ad94cbf5e13c7ae058aea7130

    • SHA1

      5900401247344abdcda7356e6b8789eae27bb085

    • SHA256

      60f6639462ae4ba06b4df5d707835d322c6b830d95bb3ee247ee489a2eef30af

    • SHA512

      43ba59942fb43ed074dc828a3d45cf6d5bef868b8927dbfbbf080db4341ca47cb6e11541b03127f50d81bfeb6714dcf161fe5250e2f1fdef37d56a631df140cc

    • SSDEEP

      6144:9BO6+sNAi9KBPKXFlR4RLsHqIJEIy6do4VChvf:PosNL9sKVf4ZsKIJEIy6do4VChvf

    Score
    6/10
    bootkitpersistence

    • Program crash

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks