Overview

overview

8

Static

static

3

39973a2c33...fb.exe

windows7-x64

6

39973a2c33...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39973a2c33927b85cde6bbaab75d1bfb

  • Size

    844KB

  • Sample

    231231-rm688afce5

  • MD5

    39973a2c33927b85cde6bbaab75d1bfb

  • SHA1

    ac9e00e3f2936896075c68753327cd11a51e9762

  • SHA256

    2a3c749fee003fe59402fe41297441d6706225d3f9d2da7b45fc7b1dba870990

  • SHA512

    7f7057f8b19ade8360d93e997aa2a278a285b546f4cd0d5437606937f62eda6ac8998f7364de24a671ebbd6a210c07262fb9844cf8beb6a69af3b2db77851138

  • SSDEEP

    24576:vNifIxtvBagPtzPw7BRDkRD/2ik2+xcaqv15mBTarnh:gfIx1BaA547rD6+12yYvvmBe

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      39973a2c33927b85cde6bbaab75d1bfb

    • Size

      844KB

    • MD5

      39973a2c33927b85cde6bbaab75d1bfb

    • SHA1

      ac9e00e3f2936896075c68753327cd11a51e9762

    • SHA256

      2a3c749fee003fe59402fe41297441d6706225d3f9d2da7b45fc7b1dba870990

    • SHA512

      7f7057f8b19ade8360d93e997aa2a278a285b546f4cd0d5437606937f62eda6ac8998f7364de24a671ebbd6a210c07262fb9844cf8beb6a69af3b2db77851138

    • SSDEEP

      24576:vNifIxtvBagPtzPw7BRDkRD/2ik2+xcaqv15mBTarnh:gfIx1BaA547rD6+12yYvvmBe

    Score
    8/10
    bootkitpersistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks