Overview

overview

6

Static

static

3

2ae5301d0e...4e.dll

windows7-x64

6

2ae5301d0e...4e.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ae5301d0e1056d9a6bbec6e7320ed4e

  • Size

    68KB

  • Sample

    231231-gnwh1aafbm

  • MD5

    2ae5301d0e1056d9a6bbec6e7320ed4e

  • SHA1

    5fadc0ad40db1962158597292ac7b9b95ceca43a

  • SHA256

    5a32ea1d082522fd2542ab7c82bb41b78fcc79d75a7c7b23f4b23ea5b958617c

  • SHA512

    aeaf60f7381af3ab578050082712c0a897d539404a581a22916fcfbbfd755447f612c5d293a1665cea0bdf513d7b82d576bc68ff65c985f5b0ca4a11b056bb2e

  • SSDEEP

    1536:Pxx0Zjh+ZzUkfRuOlKI6LyIJ52nPuPJk9F:Pxx0Nh+dUkfRuOlKI6eIbGuPSz

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2ae5301d0e1056d9a6bbec6e7320ed4e

    • Size

      68KB

    • MD5

      2ae5301d0e1056d9a6bbec6e7320ed4e

    • SHA1

      5fadc0ad40db1962158597292ac7b9b95ceca43a

    • SHA256

      5a32ea1d082522fd2542ab7c82bb41b78fcc79d75a7c7b23f4b23ea5b958617c

    • SHA512

      aeaf60f7381af3ab578050082712c0a897d539404a581a22916fcfbbfd755447f612c5d293a1665cea0bdf513d7b82d576bc68ff65c985f5b0ca4a11b056bb2e

    • SSDEEP

      1536:Pxx0Zjh+ZzUkfRuOlKI6LyIJ52nPuPJk9F:Pxx0Nh+dUkfRuOlKI6eIbGuPSz

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks