Overview

overview

7

Static

static

7

7f27f9268a...18.exe

windows7-x64

7

7f27f9268a...18.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f27f9268aaf0ffb37f5b17349b35e18

  • Size

    203KB

  • Sample

    240129-hfh4dacbd8

  • MD5

    7f27f9268aaf0ffb37f5b17349b35e18

  • SHA1

    bd610a8db47ba5f9f3528e6fba228297f3196758

  • SHA256

    a4636333389728657486bc981733f1b9bf92b5d7dc002dac41468c8e25fb6247

  • SHA512

    d860a0b20ca54983075456b76c136d567d53aa66125bb5e78f74f7b6f78da4bafd5a5e55540b70d2f3bad8aca30d04eb67a6b32a7c7390bd3fe544694b5f0d11

  • SSDEEP

    3072:ShGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJ6qXhCR7a:rR3ke8NEZrBxEYAjFbejlRMDaGFY1xI

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      7f27f9268aaf0ffb37f5b17349b35e18

    • Size

      203KB

    • MD5

      7f27f9268aaf0ffb37f5b17349b35e18

    • SHA1

      bd610a8db47ba5f9f3528e6fba228297f3196758

    • SHA256

      a4636333389728657486bc981733f1b9bf92b5d7dc002dac41468c8e25fb6247

    • SHA512

      d860a0b20ca54983075456b76c136d567d53aa66125bb5e78f74f7b6f78da4bafd5a5e55540b70d2f3bad8aca30d04eb67a6b32a7c7390bd3fe544694b5f0d11

    • SSDEEP

      3072:ShGJR3yV3O8CYdhyp5s2KoNPu56NuzdYSTnjFb3uqAlUMxqRj3geDakJ6qXhCR7a:rR3ke8NEZrBxEYAjFbejlRMDaGFY1xI

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks