Overview

overview

7

Static

static

3

496519ad65...8c.exe

windows7-x64

496519ad65...8c.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    496519ad6523cc81aa1efbf4b1734d8c

  • Size

    112KB

  • Sample

    240107-s87mjsbaf4

  • MD5

    496519ad6523cc81aa1efbf4b1734d8c

  • SHA1

    d0884a6fbbfdfdb96ecd2351f9abfa3b6d723070

  • SHA256

    15ed32b98b1cf1ac0ab96d743fa07cd954d99d8f5c487ccd81b8724cf9bb039b

  • SHA512

    958540ae591f8a1db18c5f5baa96d7ccaed9fc15729c49b998b4a36dcc1fcc5ac571f73df5052e74e8ec6a38036d29ea1b3298e50b03e0850d51824465ce8f67

  • SSDEEP

    3072:qsUdRra4l0mFlo2pKV9kC44+IraVkpugc42BXR9IR:qsaRZI2pKRt1n

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      496519ad6523cc81aa1efbf4b1734d8c

    • Size

      112KB

    • MD5

      496519ad6523cc81aa1efbf4b1734d8c

    • SHA1

      d0884a6fbbfdfdb96ecd2351f9abfa3b6d723070

    • SHA256

      15ed32b98b1cf1ac0ab96d743fa07cd954d99d8f5c487ccd81b8724cf9bb039b

    • SHA512

      958540ae591f8a1db18c5f5baa96d7ccaed9fc15729c49b998b4a36dcc1fcc5ac571f73df5052e74e8ec6a38036d29ea1b3298e50b03e0850d51824465ce8f67

    • SSDEEP

      3072:qsUdRra4l0mFlo2pKV9kC44+IraVkpugc42BXR9IR:qsaRZI2pKRt1n

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks