Overview

overview

7

Static

static

3

6b38a34c60...dc.exe

windows7-x64

7

6b38a34c60...dc.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b38a34c6079a6a17e00b6de1be661dc

  • Size

    196KB

  • Sample

    231226-nqnphaeha4

  • MD5

    6b38a34c6079a6a17e00b6de1be661dc

  • SHA1

    2074b4800150dc21d44506bee112245a848a26fe

  • SHA256

    56674e8da86b655373cd8f2b0d3ef63437445038338c4cb4f1d72a2cb17994ab

  • SHA512

    c35a11766b3d20578ef8e8ba3d29d70ecc95c598979610fcb79f05e91734846b00e6269b935ff9b35793c5bfd1a39244d6f6301d8bdda861c8cc63e137c07f8b

  • SSDEEP

    3072:OsnbeX7GNhxpETmFFQXKnq0Cc8Ph9aC8SFbjvanpEhlSjUfTfq8Y:rbeX7GNhxpETmDlnq0Cc8KyWEOjU7f

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      6b38a34c6079a6a17e00b6de1be661dc

    • Size

      196KB

    • MD5

      6b38a34c6079a6a17e00b6de1be661dc

    • SHA1

      2074b4800150dc21d44506bee112245a848a26fe

    • SHA256

      56674e8da86b655373cd8f2b0d3ef63437445038338c4cb4f1d72a2cb17994ab

    • SHA512

      c35a11766b3d20578ef8e8ba3d29d70ecc95c598979610fcb79f05e91734846b00e6269b935ff9b35793c5bfd1a39244d6f6301d8bdda861c8cc63e137c07f8b

    • SSDEEP

      3072:OsnbeX7GNhxpETmFFQXKnq0Cc8Ph9aC8SFbjvanpEhlSjUfTfq8Y:rbeX7GNhxpETmDlnq0Cc8KyWEOjU7f

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks