Overview

overview

7

Static

static

3

8f85511a37...21.exe

windows7-x64

7

8f85511a37...21.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8f85511a3740813e02772f3c3de36a0212c4b92144edc1570b7ceec367e84721

  • Size

    2.8MB

  • Sample

    240212-c1ph1aag59

  • MD5

    d88957ce73ecc965e9e20135485ba261

  • SHA1

    677d695691f1a09af9c7cc912c000dfe654042aa

  • SHA256

    8f85511a3740813e02772f3c3de36a0212c4b92144edc1570b7ceec367e84721

  • SHA512

    4074fa9ae7d011ede4bbdd78626b55d4e16161899e4c7febee80ff3335e15a8ae6f62339820175e47e80729599d8083f212f6797c9c591e377e18151f90411b4

  • SSDEEP

    49152:OoN5hj0b85135CIxzHOldFEFIJuCPcXqut1Z36OJIeb6gP3yTotvDdvPhgo7gq0y:OoP+APAtfzJebdgqX

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      8f85511a3740813e02772f3c3de36a0212c4b92144edc1570b7ceec367e84721

    • Size

      2.8MB

    • MD5

      d88957ce73ecc965e9e20135485ba261

    • SHA1

      677d695691f1a09af9c7cc912c000dfe654042aa

    • SHA256

      8f85511a3740813e02772f3c3de36a0212c4b92144edc1570b7ceec367e84721

    • SHA512

      4074fa9ae7d011ede4bbdd78626b55d4e16161899e4c7febee80ff3335e15a8ae6f62339820175e47e80729599d8083f212f6797c9c591e377e18151f90411b4

    • SSDEEP

      49152:OoN5hj0b85135CIxzHOldFEFIJuCPcXqut1Z36OJIeb6gP3yTotvDdvPhgo7gq0y:OoP+APAtfzJebdgqX

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks