Overview

overview

7

Static

static

7

3a134b7f49...7e.exe

windows7-x64

7

3a134b7f49...7e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a134b7f49bd565f72816236112ec97e

  • Size

    241KB

  • Sample

    231231-rz5adsffgk

  • MD5

    3a134b7f49bd565f72816236112ec97e

  • SHA1

    562b3f8a601878a9c5da4fd33d0aa42e76094d69

  • SHA256

    26ef3790b394d9d6e19283d3bb9655a84f0e308eafe0b26f93b21db2990a6fad

  • SHA512

    2a062cae3e0fbd66d144fbd50ce056ffde8f259003ba12e68c20dc9fdef01794161ee88ba90e47bedfadb8066e8c28fa5e61b595f8dfe3f504e7fafca8f98d84

  • SSDEEP

    6144:qkeENDvTSn2SV/GuhYdViC7X57+nMhMJ3Pnyj/q:qNEND/k/GLPX57+nJIj/q

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      3a134b7f49bd565f72816236112ec97e

    • Size

      241KB

    • MD5

      3a134b7f49bd565f72816236112ec97e

    • SHA1

      562b3f8a601878a9c5da4fd33d0aa42e76094d69

    • SHA256

      26ef3790b394d9d6e19283d3bb9655a84f0e308eafe0b26f93b21db2990a6fad

    • SHA512

      2a062cae3e0fbd66d144fbd50ce056ffde8f259003ba12e68c20dc9fdef01794161ee88ba90e47bedfadb8066e8c28fa5e61b595f8dfe3f504e7fafca8f98d84

    • SSDEEP

      6144:qkeENDvTSn2SV/GuhYdViC7X57+nMhMJ3Pnyj/q:qNEND/k/GLPX57+nJIj/q

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks