Overview

overview

10

Static

static

3

51b403a697...24.exe

windows7-x64

6

51b403a697...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51b403a697ce08a116160705495eeb24

  • Size

    329KB

  • Sample

    240110-1myrhshfh8

  • MD5

    51b403a697ce08a116160705495eeb24

  • SHA1

    7aaf9daedd0b15ef209a747bf1a21608ab0411d2

  • SHA256

    4770469236c17651d1842cc36004bc13ff8aa6fd658cdd6ebc0aa45de15a94bc

  • SHA512

    b3f9a34ceedd9f712749a5169004069295b13afaabadefbf6ae137aa3bed04fa4ae2c32d1a8f2b00715c42f641cd39649002e599e6595a9ed242069ae356b0c7

  • SSDEEP

    6144:Ph3Cy0seF78sWog3r3HHuEZ20BuMpZd9nVW5GJZ2tNYLj8MfsICENSDp+M:pwpF7gbXuEZ2DMpRVzYKj86sIvNS

Score
10/10
bootkitevasionpersistence

Malware Config

Targets

    • Target

      51b403a697ce08a116160705495eeb24

    • Size

      329KB

    • MD5

      51b403a697ce08a116160705495eeb24

    • SHA1

      7aaf9daedd0b15ef209a747bf1a21608ab0411d2

    • SHA256

      4770469236c17651d1842cc36004bc13ff8aa6fd658cdd6ebc0aa45de15a94bc

    • SHA512

      b3f9a34ceedd9f712749a5169004069295b13afaabadefbf6ae137aa3bed04fa4ae2c32d1a8f2b00715c42f641cd39649002e599e6595a9ed242069ae356b0c7

    • SSDEEP

      6144:Ph3Cy0seF78sWog3r3HHuEZ20BuMpZd9nVW5GJZ2tNYLj8MfsICENSDp+M:pwpF7gbXuEZ2DMpRVzYKj86sIvNS

    Score
    10/10
    bootkitpersistenceevasion

    • Modifies firewall policy service

      evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks