Overview

overview

6

Static

static

3

67ea8dd1b7...60.exe

windows7-x64

6

67ea8dd1b7...60.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    67ea8dd1b7318ee6d0dc4af0eb9dc8352ce9f7b2785fc62ce511e06a3e2d8b60

  • Size

    14.2MB

  • Sample

    240201-ha3ktsfcdj

  • MD5

    c58639cb61f8a26571b8244f3e54a226

  • SHA1

    b0f0dde658e540aa659b569163bd55575a56d063

  • SHA256

    67ea8dd1b7318ee6d0dc4af0eb9dc8352ce9f7b2785fc62ce511e06a3e2d8b60

  • SHA512

    61b5a17528259388d892275801fdd3667c161b7b719051652e99acbf47a352d7227aca8b650f0907974c17c791ee9b7e4d1cfeec9676c429170a2d6790662071

  • SSDEEP

    393216:F+vzVIDee3IAfq3/Gq5QVA2TvzjfZbYA+DIc0:IvzVICAf+Gq0Tvzx9Oe

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      67ea8dd1b7318ee6d0dc4af0eb9dc8352ce9f7b2785fc62ce511e06a3e2d8b60

    • Size

      14.2MB

    • MD5

      c58639cb61f8a26571b8244f3e54a226

    • SHA1

      b0f0dde658e540aa659b569163bd55575a56d063

    • SHA256

      67ea8dd1b7318ee6d0dc4af0eb9dc8352ce9f7b2785fc62ce511e06a3e2d8b60

    • SHA512

      61b5a17528259388d892275801fdd3667c161b7b719051652e99acbf47a352d7227aca8b650f0907974c17c791ee9b7e4d1cfeec9676c429170a2d6790662071

    • SSDEEP

      393216:F+vzVIDee3IAfq3/Gq5QVA2TvzjfZbYA+DIc0:IvzVICAf+Gq0Tvzx9Oe

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks