Overview

overview

7

Static

static

3

013ca73cfc...bc.exe

windows7-x64

7

013ca73cfc...bc.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    013ca73cfc19ba4c79ad3f5dcf47ec755f9c580f97267380c28cf83eaec3f5bc

  • Size

    2.6MB

  • Sample

    240202-zdgwzahcbk

  • MD5

    1c85404a2ad713a1701467c8344e65ac

  • SHA1

    f55ea7365344b7082f2741331b28aeb1711b6bfb

  • SHA256

    013ca73cfc19ba4c79ad3f5dcf47ec755f9c580f97267380c28cf83eaec3f5bc

  • SHA512

    a23739e6f8efdab93a4b3e0df413e0a3b7f319c654be27c7b961347986649adf623a9a9bc1582e45054e7c5e0241b9a9867b06eef2de69b56c1c972e03cf62e5

  • SSDEEP

    49152:ogpBULEt2tB7b26iEMO8sfz44dGgXpk8Ji7JvLWlqm95GLz2iPOqTHVXzyvPhGdO:oomIczkwJeKGLKgdDhqZ

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      013ca73cfc19ba4c79ad3f5dcf47ec755f9c580f97267380c28cf83eaec3f5bc

    • Size

      2.6MB

    • MD5

      1c85404a2ad713a1701467c8344e65ac

    • SHA1

      f55ea7365344b7082f2741331b28aeb1711b6bfb

    • SHA256

      013ca73cfc19ba4c79ad3f5dcf47ec755f9c580f97267380c28cf83eaec3f5bc

    • SHA512

      a23739e6f8efdab93a4b3e0df413e0a3b7f319c654be27c7b961347986649adf623a9a9bc1582e45054e7c5e0241b9a9867b06eef2de69b56c1c972e03cf62e5

    • SSDEEP

      49152:ogpBULEt2tB7b26iEMO8sfz44dGgXpk8Ji7JvLWlqm95GLz2iPOqTHVXzyvPhGdO:oomIczkwJeKGLKgdDhqZ

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks