Overview

overview

6

Static

static

3

2cf8005fe6...5e.dll

windows7-x64

6

2cf8005fe6...5e.dll

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2cf8005fe6571778baa1181c9888795e

  • Size

    84KB

  • Sample

    231231-h2w75adgfq

  • MD5

    2cf8005fe6571778baa1181c9888795e

  • SHA1

    23c4ba56b05e870764d4c9748e5b8b537b6ff3a7

  • SHA256

    4a45566604c3d1ddc43c0d2130614af779a0de8f165596bfdce3329c50efae90

  • SHA512

    dec9154b796396ed16976c31013d1df36a72b2373fb26df5a2a098abd823e82d0836de29d2c846abcda97ea8184667dc4068409c90f73d32a97c5d0a37259ba4

  • SSDEEP

    1536:ezXXEz132xYuOsiOBDokwPwIoaKRt/vKi:eE5IYuOsiOBDokKCx3

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2cf8005fe6571778baa1181c9888795e

    • Size

      84KB

    • MD5

      2cf8005fe6571778baa1181c9888795e

    • SHA1

      23c4ba56b05e870764d4c9748e5b8b537b6ff3a7

    • SHA256

      4a45566604c3d1ddc43c0d2130614af779a0de8f165596bfdce3329c50efae90

    • SHA512

      dec9154b796396ed16976c31013d1df36a72b2373fb26df5a2a098abd823e82d0836de29d2c846abcda97ea8184667dc4068409c90f73d32a97c5d0a37259ba4

    • SSDEEP

      1536:ezXXEz132xYuOsiOBDokwPwIoaKRt/vKi:eE5IYuOsiOBDokKCx3

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks