Overview

overview

8

Static

static

3

34f10ecf6b...2a.exe

windows7-x64

7

34f10ecf6b...2a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    34f10ecf6b3660d9cc704e372c1b0a2a

  • Size

    829KB

  • Sample

    231225-w8wf3afbc9

  • MD5

    34f10ecf6b3660d9cc704e372c1b0a2a

  • SHA1

    043ef8ea7d40b992ad343c05813d2c7d9b67a220

  • SHA256

    e87e9dc71a7679cb7f6bd00698d730e38742f8ef12b0cd23db0a0f8d20f7a2d4

  • SHA512

    023044bd71e3eeb457ed3b401e196d0d4603059007cd62171c071fb689397c5fd24b61bee175349d3a35d3807ca8f556b05cf654b9161d879c57634181e6a436

  • SSDEEP

    12288:ICyXaeq0kx9/YINidEjKDDdwJcGv5eyeGn5JxqvINHzRRymdAq4CqOj+qifJY:Ik0kcXatAKn5bhl2G9jq7qkY

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      34f10ecf6b3660d9cc704e372c1b0a2a

    • Size

      829KB

    • MD5

      34f10ecf6b3660d9cc704e372c1b0a2a

    • SHA1

      043ef8ea7d40b992ad343c05813d2c7d9b67a220

    • SHA256

      e87e9dc71a7679cb7f6bd00698d730e38742f8ef12b0cd23db0a0f8d20f7a2d4

    • SHA512

      023044bd71e3eeb457ed3b401e196d0d4603059007cd62171c071fb689397c5fd24b61bee175349d3a35d3807ca8f556b05cf654b9161d879c57634181e6a436

    • SSDEEP

      12288:ICyXaeq0kx9/YINidEjKDDdwJcGv5eyeGn5JxqvINHzRRymdAq4CqOj+qifJY:Ik0kcXatAKn5bhl2G9jq7qkY

    Score
    8/10
    bootkitpersistence

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks