Overview

overview

7

Static

static

3

5a4d0fd6a5...95.exe

windows7-x64

7

5a4d0fd6a5...95.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5a4d0fd6a5aaa1f3135c206897135b95

  • Size

    105KB

  • Sample

    231226-hfxlrshdd2

  • MD5

    5a4d0fd6a5aaa1f3135c206897135b95

  • SHA1

    0e4ab53d631b794ef3c0fa219e145bb480fe6762

  • SHA256

    dd13faa31351e807e1983b08b28efff1aa513e7c886c3676563f5d3fbd368c88

  • SHA512

    13fe1effc35e1dc8aeb801dbca0f3c6ba0b367e01b1b9c4bf72ac942ff77a92de7dfde259733708bfe08672e5cfa7a9ccd12858241cc140e292b7d37f3c89eea

  • SSDEEP

    3072:lr/Ipm5cgIDed/Zsc6dpVCuY/gGP22V6:lz52DedBspVC5hL

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      5a4d0fd6a5aaa1f3135c206897135b95

    • Size

      105KB

    • MD5

      5a4d0fd6a5aaa1f3135c206897135b95

    • SHA1

      0e4ab53d631b794ef3c0fa219e145bb480fe6762

    • SHA256

      dd13faa31351e807e1983b08b28efff1aa513e7c886c3676563f5d3fbd368c88

    • SHA512

      13fe1effc35e1dc8aeb801dbca0f3c6ba0b367e01b1b9c4bf72ac942ff77a92de7dfde259733708bfe08672e5cfa7a9ccd12858241cc140e292b7d37f3c89eea

    • SSDEEP

      3072:lr/Ipm5cgIDed/Zsc6dpVCuY/gGP22V6:lz52DedBspVC5hL

    Score
    7/10
    bootkitpersistence

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks