Overview

overview

7

Static

static

7

0d09f85100...f8.exe

windows7-x64

7

0d09f85100...f8.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d09f85100aece02b3b780531f51f4f8

  • Size

    328KB

  • Sample

    231230-d3ebgsfbb8

  • MD5

    0d09f85100aece02b3b780531f51f4f8

  • SHA1

    40ad5142f93489b576af7f929438cdd93bba0a57

  • SHA256

    abef0507abeffff918de91f5882366514d5f30104f94ac8f5af7385bedd79a50

  • SHA512

    38ea62cfe01760c21fb101da3a683caecb798b46537d56782957717fc64066880b828422f219536c5593dab3edc3bf1e3f0c3dff978cfed5cdb768ec0e7aab45

  • SSDEEP

    6144:0ePJYhcvhLxotp++sCTHUIKz3JWGYBjWo854Ts2e00B2VCMei5nF4HJpT:0ePJYIh9of++skOYBjDcZ2e0ugDei5nY

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      0d09f85100aece02b3b780531f51f4f8

    • Size

      328KB

    • MD5

      0d09f85100aece02b3b780531f51f4f8

    • SHA1

      40ad5142f93489b576af7f929438cdd93bba0a57

    • SHA256

      abef0507abeffff918de91f5882366514d5f30104f94ac8f5af7385bedd79a50

    • SHA512

      38ea62cfe01760c21fb101da3a683caecb798b46537d56782957717fc64066880b828422f219536c5593dab3edc3bf1e3f0c3dff978cfed5cdb768ec0e7aab45

    • SSDEEP

      6144:0ePJYhcvhLxotp++sCTHUIKz3JWGYBjWo854Ts2e00B2VCMei5nF4HJpT:0ePJYIh9of++skOYBjDcZ2e0ugDei5nY

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks