Overview

overview

7

Static

static

7

39cc04b8c0...ff.exe

windows7-x64

7

39cc04b8c0...ff.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    39cc04b8c0947dece3e8f67e30e97e5c293c57bd2a845d64c256e37c1db2ddff

  • Size

    7.2MB

  • Sample

    240201-3ljx3sbafm

  • MD5

    36a5f5f36ae817519e514fc5c8e94c5a

  • SHA1

    3bc60bce5322418c0491fdaa37d2dddd6e90e9f7

  • SHA256

    39cc04b8c0947dece3e8f67e30e97e5c293c57bd2a845d64c256e37c1db2ddff

  • SHA512

    e1a817493364a1fbb71e5bca4547eb8c7d0cc8999fa2e4e57e118878e5473f07f1809916c904dfcce6552a8c1c003579f785bea9919bc26bcede3ce0e4b746a1

  • SSDEEP

    196608:6a2BsoVNcagmPp8hreaiy6+oujtI9Qu+jy4ZzHhWW:6a2/cAR8YasDuub4ZTgW

Score
7/10
bootkitpersistencevmprotect

Malware Config

Targets

    • Target

      39cc04b8c0947dece3e8f67e30e97e5c293c57bd2a845d64c256e37c1db2ddff

    • Size

      7.2MB

    • MD5

      36a5f5f36ae817519e514fc5c8e94c5a

    • SHA1

      3bc60bce5322418c0491fdaa37d2dddd6e90e9f7

    • SHA256

      39cc04b8c0947dece3e8f67e30e97e5c293c57bd2a845d64c256e37c1db2ddff

    • SHA512

      e1a817493364a1fbb71e5bca4547eb8c7d0cc8999fa2e4e57e118878e5473f07f1809916c904dfcce6552a8c1c003579f785bea9919bc26bcede3ce0e4b746a1

    • SSDEEP

      196608:6a2BsoVNcagmPp8hreaiy6+oujtI9Qu+jy4ZzHhWW:6a2/cAR8YasDuub4ZTgW

    Score
    7/10
    bootkitpersistencevmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks