Overview

overview

8

Static

static

3

133c0736e3...70.exe

windows7-x64

8

133c0736e3...70.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    133c0736e31f1cd09c06e4795bbc6670

  • Size

    176KB

  • Sample

    231230-j7mrbabgb4

  • MD5

    133c0736e31f1cd09c06e4795bbc6670

  • SHA1

    331a6869fb81e9818b93a5f905bd72b0032131d7

  • SHA256

    b1c362d2b8571bc402be48503805469590c36fb6073329b5c96aa05761b7bd2f

  • SHA512

    1873c3454375d09a937df3e41d6b87364699e4c98f87774ea67e9efef022cfd421256026568532a87a7fa2bc42435f55a1f191e3924f443acb387b8cdc047181

  • SSDEEP

    3072:kvzYFkSteUXaEx1Xki87wIejTGg843Q5zjvW7gk9DNF3B+u/gfVtQi:kLYKSQUXaEx1Xki53jigb3Q5zeFlNeuy

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      133c0736e31f1cd09c06e4795bbc6670

    • Size

      176KB

    • MD5

      133c0736e31f1cd09c06e4795bbc6670

    • SHA1

      331a6869fb81e9818b93a5f905bd72b0032131d7

    • SHA256

      b1c362d2b8571bc402be48503805469590c36fb6073329b5c96aa05761b7bd2f

    • SHA512

      1873c3454375d09a937df3e41d6b87364699e4c98f87774ea67e9efef022cfd421256026568532a87a7fa2bc42435f55a1f191e3924f443acb387b8cdc047181

    • SSDEEP

      3072:kvzYFkSteUXaEx1Xki87wIejTGg843Q5zjvW7gk9DNF3B+u/gfVtQi:kLYKSQUXaEx1Xki53jigb3Q5zeFlNeuy

    Score
    8/10
    bootkitpersistence

    • Drops file in Drivers directory

    • Sets DLL path for service in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks