Overview

overview

7

Static

static

3

0b6e33ccac...68.exe

windows7-x64

7

0b6e33ccac...68.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b6e33ccace9b939a23d3293f5aa5568

  • Size

    1.5MB

  • Sample

    231230-cr7m8addb5

  • MD5

    0b6e33ccace9b939a23d3293f5aa5568

  • SHA1

    a042270e986e9faf5844a74d296b1a0187b8178e

  • SHA256

    d0058922abd80fe30b7b455617471752a3ac840ad45d0463ddfc37da39f4bcf2

  • SHA512

    c2b49269cb7077e179f03aeb994b89b8a9681be18ac59dc5d3965d69d598827832ce0b0788e8562d597eea5392c5b6b2a51cf609ff0eb206dd05dbdf9679fc39

  • SSDEEP

    49152:CI+IQX1Fbr0ZFbr0rhZdFTUtcr8gPDfueC:CI+jbmb+hlI0FPI

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      0b6e33ccace9b939a23d3293f5aa5568

    • Size

      1.5MB

    • MD5

      0b6e33ccace9b939a23d3293f5aa5568

    • SHA1

      a042270e986e9faf5844a74d296b1a0187b8178e

    • SHA256

      d0058922abd80fe30b7b455617471752a3ac840ad45d0463ddfc37da39f4bcf2

    • SHA512

      c2b49269cb7077e179f03aeb994b89b8a9681be18ac59dc5d3965d69d598827832ce0b0788e8562d597eea5392c5b6b2a51cf609ff0eb206dd05dbdf9679fc39

    • SSDEEP

      49152:CI+IQX1Fbr0ZFbr0rhZdFTUtcr8gPDfueC:CI+jbmb+hlI0FPI

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks