Overview

overview

7

Static

static

3

25bd57a103...77.exe

windows7-x64

7

25bd57a103...77.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25bd57a1034c3e7b57846255aa285077

  • Size

    899KB

  • Sample

    231231-dmbknaecap

  • MD5

    25bd57a1034c3e7b57846255aa285077

  • SHA1

    6918a5793d54906c3c120dc9d348c7d72b249423

  • SHA256

    307b3a1fbd441e54934284c21e0db78b5ec417e9f0e1c3bfa45dcca94196261e

  • SHA512

    7cc0695a626887ce7d752e1df44a84d329f0d90f11e7b3ee84dc2f1d3dd47a2f54bf24f356dccd378e2e9b37790294d860ed2822dfc409dd2bafaa44c232575f

  • SSDEEP

    24576:2Ms1/QkXzu4zzB6fJ2dM3snVAFQf3w7yKS:rcokXzu4XBCoe3sV9Gyf

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      25bd57a1034c3e7b57846255aa285077

    • Size

      899KB

    • MD5

      25bd57a1034c3e7b57846255aa285077

    • SHA1

      6918a5793d54906c3c120dc9d348c7d72b249423

    • SHA256

      307b3a1fbd441e54934284c21e0db78b5ec417e9f0e1c3bfa45dcca94196261e

    • SHA512

      7cc0695a626887ce7d752e1df44a84d329f0d90f11e7b3ee84dc2f1d3dd47a2f54bf24f356dccd378e2e9b37790294d860ed2822dfc409dd2bafaa44c232575f

    • SSDEEP

      24576:2Ms1/QkXzu4zzB6fJ2dM3snVAFQf3w7yKS:rcokXzu4XBCoe3sV9Gyf

    Score
    7/10
    bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks