Overview

overview

7

Static

static

7

57ccebd94e...69.exe

windows7-x64

7

57ccebd94e...69.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57ccebd94e62b7cd2efcfefceaa28669

  • Size

    329KB

  • Sample

    231226-gexppsbghn

  • MD5

    57ccebd94e62b7cd2efcfefceaa28669

  • SHA1

    e6bafc153f3671ca1175914f8f71b5f46e294b6d

  • SHA256

    49cd243beb673a8c266a7fd280bf3b0c5b4f9ddccbe4227edb1216a26a49d19a

  • SHA512

    f23409d179637834004d06dae5edc984f0e1daa4d7f0a3bab3a61f3200c090f3bb2af46e50c3d76e80522ff649f0d15791d53f317a87806b619759ce891f7580

  • SSDEEP

    6144:AS+QH6yN8wfRe3q+2ZYbO2PY/eQanlrUKzjlfFr2JESMP4JhyYMT+a:KE6y66e3N272PYXZKnltiJMgJc+a

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      57ccebd94e62b7cd2efcfefceaa28669

    • Size

      329KB

    • MD5

      57ccebd94e62b7cd2efcfefceaa28669

    • SHA1

      e6bafc153f3671ca1175914f8f71b5f46e294b6d

    • SHA256

      49cd243beb673a8c266a7fd280bf3b0c5b4f9ddccbe4227edb1216a26a49d19a

    • SHA512

      f23409d179637834004d06dae5edc984f0e1daa4d7f0a3bab3a61f3200c090f3bb2af46e50c3d76e80522ff649f0d15791d53f317a87806b619759ce891f7580

    • SSDEEP

      6144:AS+QH6yN8wfRe3q+2ZYbO2PY/eQanlrUKzjlfFr2JESMP4JhyYMT+a:KE6y66e3N272PYXZKnltiJMgJc+a

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks