Overview

overview

7

Static

static

3

a3b499cc69...12.exe

windows7-x64

7

a3b499cc69...12.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a3b499cc69aa3282cf404983adb8af2c8dc5fd90294b3dba96143e207544b012

  • Size

    3.5MB

  • Sample

    240122-yg8y7adcd6

  • MD5

    52b11eab2f0a06429555f31bceddab8c

  • SHA1

    cc35c3a5a05dd3aab5a29a097a4b51a594f47f7b

  • SHA256

    a3b499cc69aa3282cf404983adb8af2c8dc5fd90294b3dba96143e207544b012

  • SHA512

    63fd30bb08b096eee63f8b6f306f6c7b31eabf43935382a4c8cf7ea6336c537c5e52ddc5f4f5267dc20b8d583acfc50f6dca5868eaaeab895e1f8a1ec3c71c65

  • SSDEEP

    98304:iev6MvU30Ls8j2N9yUdlgi/KrN7NIq57YN:ievy307ab2ZNIq5u

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      a3b499cc69aa3282cf404983adb8af2c8dc5fd90294b3dba96143e207544b012

    • Size

      3.5MB

    • MD5

      52b11eab2f0a06429555f31bceddab8c

    • SHA1

      cc35c3a5a05dd3aab5a29a097a4b51a594f47f7b

    • SHA256

      a3b499cc69aa3282cf404983adb8af2c8dc5fd90294b3dba96143e207544b012

    • SHA512

      63fd30bb08b096eee63f8b6f306f6c7b31eabf43935382a4c8cf7ea6336c537c5e52ddc5f4f5267dc20b8d583acfc50f6dca5868eaaeab895e1f8a1ec3c71c65

    • SSDEEP

      98304:iev6MvU30Ls8j2N9yUdlgi/KrN7NIq57YN:ievy307ab2ZNIq5u

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks