Overview

overview

7

Static

static

3

9b6a53b325...17.exe

windows7-x64

9b6a53b325...17.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b6a53b3250e7ea139838c9657085617

  • Size

    194KB

  • Sample

    240214-mbemlsgg87

  • MD5

    9b6a53b3250e7ea139838c9657085617

  • SHA1

    1bf111054265f138ca24c25d4e840a7101fa6fde

  • SHA256

    70bbf3553a99fc51a7f5def418a5694dd51651b4843544a2abea0235712d4c67

  • SHA512

    d28da31f00a3e3b8f943fe07bc86d4143239727fbd4af13ca06297b2086a3397e9bf5a69dc239fd45d016ac327dc51524aa53b2adcc3112c70539f761cb9024a

  • SSDEEP

    3072:WL74zA87QCrq+816mbhdqlJtpuvBXQakq6:A4zACq+8oMhYFs4

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      9b6a53b3250e7ea139838c9657085617

    • Size

      194KB

    • MD5

      9b6a53b3250e7ea139838c9657085617

    • SHA1

      1bf111054265f138ca24c25d4e840a7101fa6fde

    • SHA256

      70bbf3553a99fc51a7f5def418a5694dd51651b4843544a2abea0235712d4c67

    • SHA512

      d28da31f00a3e3b8f943fe07bc86d4143239727fbd4af13ca06297b2086a3397e9bf5a69dc239fd45d016ac327dc51524aa53b2adcc3112c70539f761cb9024a

    • SSDEEP

      3072:WL74zA87QCrq+816mbhdqlJtpuvBXQakq6:A4zACq+8oMhYFs4

    Score
    7/10
    bootkitpersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks