Overview

overview

7

Static

static

3

741fdb7c64...61.exe

windows7-x64

7

741fdb7c64...61.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    741fdb7c64f64cea198b80380e58cd61

  • Size

    714KB

  • Sample

    231226-rct6xacedl

  • MD5

    741fdb7c64f64cea198b80380e58cd61

  • SHA1

    b9d3a14df24aae332d5e4e20a3e49610a037dd65

  • SHA256

    774bd10eea00db8e7eb85f86f25461f08a49504af92bf27bc673dbf0e71dbc98

  • SHA512

    cab8deb4b9bbd66456251dde9fa71f608658a7c792cfbe7fea72f662c31b7910361a8397842ae2228921586a0a713819c79886c7b15d63ba052bbc4a6a3e9886

  • SSDEEP

    12288:v2UtO9NJlEd66iwglF/I9Psc3VUc/9ef1vKbrFr5+qFz1RY7ytS8eijhTF+UmZ:v2Up63w2FENx/Ukd5FFzzQyA8eUF+JZ

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      741fdb7c64f64cea198b80380e58cd61

    • Size

      714KB

    • MD5

      741fdb7c64f64cea198b80380e58cd61

    • SHA1

      b9d3a14df24aae332d5e4e20a3e49610a037dd65

    • SHA256

      774bd10eea00db8e7eb85f86f25461f08a49504af92bf27bc673dbf0e71dbc98

    • SHA512

      cab8deb4b9bbd66456251dde9fa71f608658a7c792cfbe7fea72f662c31b7910361a8397842ae2228921586a0a713819c79886c7b15d63ba052bbc4a6a3e9886

    • SSDEEP

      12288:v2UtO9NJlEd66iwglF/I9Psc3VUc/9ef1vKbrFr5+qFz1RY7ytS8eijhTF+UmZ:v2Up63w2FENx/Ukd5FFzzQyA8eUF+JZ

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks