Overview

overview

7

Static

static

7

036c6e49f1...21.exe

windows7-x64

7

036c6e49f1...21.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    036c6e49f1a3ab7d106eef7daf3a4521

  • Size

    327KB

  • Sample

    231229-zgal3aefdl

  • MD5

    036c6e49f1a3ab7d106eef7daf3a4521

  • SHA1

    bd393ed4109d261098be05b8f59a007c5c28914d

  • SHA256

    8f81c4c154884d4e22e19693279c388edd9cd1bebbc5df68e738fd0ba70513a4

  • SHA512

    25dea214f3f567c45e001dc97b24a191bf9e1c4e272f70530bb15a858fefa7e3d49d53c0f6cebe30b20aba30716146a06ed6c491ffc2423ab4a940e5d57ab178

  • SSDEEP

    6144:FeXA47CURW+eirtnIwE0XzBTjrBLt4smgZKLY3Om2Nw0QLyUdKPZDq48bOo:FeXv7tRWwnIKBTjx6smg4LY+yKAVOo

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      036c6e49f1a3ab7d106eef7daf3a4521

    • Size

      327KB

    • MD5

      036c6e49f1a3ab7d106eef7daf3a4521

    • SHA1

      bd393ed4109d261098be05b8f59a007c5c28914d

    • SHA256

      8f81c4c154884d4e22e19693279c388edd9cd1bebbc5df68e738fd0ba70513a4

    • SHA512

      25dea214f3f567c45e001dc97b24a191bf9e1c4e272f70530bb15a858fefa7e3d49d53c0f6cebe30b20aba30716146a06ed6c491ffc2423ab4a940e5d57ab178

    • SSDEEP

      6144:FeXA47CURW+eirtnIwE0XzBTjrBLt4smgZKLY3Om2Nw0QLyUdKPZDq48bOo:FeXv7tRWwnIKBTjx6smg4LY+yKAVOo

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks