Overview

overview

6

Static

static

3

2024-02-14...ba.exe

windows7-x64

2024-02-14...ba.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-14_83d6ef80f1ea9dc1a0a344f5c0e3e171_mbrlock_xiaoba

  • Size

    840KB

  • Sample

    240214-fcs33ahc9v

  • MD5

    83d6ef80f1ea9dc1a0a344f5c0e3e171

  • SHA1

    727179a28ff3e5990b662a7f064da1487c064134

  • SHA256

    d39dfb5cc9394dc121ef8e9efc08e4cf32e3200bc31e88dfe65449d1c8940685

  • SHA512

    05f9cb4a9d9927bb2b581296dd0a708dfe2dc3968f6fa7036d1f196a79604e3e987fe3914cfd366a380591f106ad1d6ef79892834684f76e694e386c4bd1fb3c

  • SSDEEP

    12288:27FCtbn5nW/SkIJuEDdE4dS4RY+EtPTZni5Kyt5UUY:27Fk5W/9IJjDO4dSD+EtPTZiUytCU

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      2024-02-14_83d6ef80f1ea9dc1a0a344f5c0e3e171_mbrlock_xiaoba

    • Size

      840KB

    • MD5

      83d6ef80f1ea9dc1a0a344f5c0e3e171

    • SHA1

      727179a28ff3e5990b662a7f064da1487c064134

    • SHA256

      d39dfb5cc9394dc121ef8e9efc08e4cf32e3200bc31e88dfe65449d1c8940685

    • SHA512

      05f9cb4a9d9927bb2b581296dd0a708dfe2dc3968f6fa7036d1f196a79604e3e987fe3914cfd366a380591f106ad1d6ef79892834684f76e694e386c4bd1fb3c

    • SSDEEP

      12288:27FCtbn5nW/SkIJuEDdE4dS4RY+EtPTZni5Kyt5UUY:27Fk5W/9IJjDO4dSD+EtPTZiUytCU

    Score
    6/10
    bootkitpersistence

    • Adds Run key to start application

      persistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks