Overview

overview

7

Static

static

3

6b36d6d184...93.exe

windows7-x64

7

6b36d6d184...93.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b36d6d18457d88a2caf84ba11f8e62eec7a310f0d40d563da429b90c0ffe193

  • Size

    4.8MB

  • Sample

    240107-hznszahfb5

  • MD5

    c8281e20d500071280da304dfc861404

  • SHA1

    61beafec2b0507ac39b37c4a2f29bf1ca5f2f07b

  • SHA256

    6b36d6d18457d88a2caf84ba11f8e62eec7a310f0d40d563da429b90c0ffe193

  • SHA512

    913d336da33e31794acb78e20922434c332ec449ea8f108e7919a6dae8fff4e7b9fc74cc02e55a9e9da4045650b4fe42e4b1edb5d240a6baab7ba255cf33b6a4

  • SSDEEP

    98304:xt9OGW/KHV35P/9vyPGrx2fEyM1RHJhl1IxpP:IcBx2f9M1RHp1IPP

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      6b36d6d18457d88a2caf84ba11f8e62eec7a310f0d40d563da429b90c0ffe193

    • Size

      4.8MB

    • MD5

      c8281e20d500071280da304dfc861404

    • SHA1

      61beafec2b0507ac39b37c4a2f29bf1ca5f2f07b

    • SHA256

      6b36d6d18457d88a2caf84ba11f8e62eec7a310f0d40d563da429b90c0ffe193

    • SHA512

      913d336da33e31794acb78e20922434c332ec449ea8f108e7919a6dae8fff4e7b9fc74cc02e55a9e9da4045650b4fe42e4b1edb5d240a6baab7ba255cf33b6a4

    • SSDEEP

      98304:xt9OGW/KHV35P/9vyPGrx2fEyM1RHJhl1IxpP:IcBx2f9M1RHp1IPP

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks