Overview

overview

7

Static

static

7

018ddb4be3...af.exe

windows7-x64

7

018ddb4be3...af.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    018ddb4be30ecbd3c73c984d9f628baf

  • Size

    345KB

  • Sample

    231229-x24pjaaabl

  • MD5

    018ddb4be30ecbd3c73c984d9f628baf

  • SHA1

    34c069ffc39b0694bd5f7e217e460fd1892d89f9

  • SHA256

    0634f3329ffe43fe810e7e3839a2fd6b405f191c3ef392c3ff8207ee955f63ae

  • SHA512

    5cfb71edad4b45f25460dc02f80e784663b324b244518e1c6654f6308ff17bf39e1412f1566afe105f8a9230e062031bfbc5ab2b8ba7d2f2cbc6aeba63e0b727

  • SSDEEP

    6144:cLhb9c0JB1V7V4BKx4OYke4DKEbYznfeEJrDu9GBXQf1RVi9uIu:cLDcQnVOG4OYke4YznfeEeGBANzi9uIu

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      018ddb4be30ecbd3c73c984d9f628baf

    • Size

      345KB

    • MD5

      018ddb4be30ecbd3c73c984d9f628baf

    • SHA1

      34c069ffc39b0694bd5f7e217e460fd1892d89f9

    • SHA256

      0634f3329ffe43fe810e7e3839a2fd6b405f191c3ef392c3ff8207ee955f63ae

    • SHA512

      5cfb71edad4b45f25460dc02f80e784663b324b244518e1c6654f6308ff17bf39e1412f1566afe105f8a9230e062031bfbc5ab2b8ba7d2f2cbc6aeba63e0b727

    • SSDEEP

      6144:cLhb9c0JB1V7V4BKx4OYke4DKEbYznfeEJrDu9GBXQf1RVi9uIu:cLDcQnVOG4OYke4YznfeEeGBANzi9uIu

    Score
    7/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks