Overview

overview

8

Static

static

3

Obekräfta...47.exe

windows7-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Obekräftade 309647.crdownload

  • Size

    43KB

  • Sample

    240222-kcctasee9z

  • MD5

    f6aa0dd947ff84db2c0e991aab776dcc

  • SHA1

    73d377c8d4b7d04ac9fd6c47d74491d76ca6cf6e

  • SHA256

    2ab5f10366ebad9e4af9369730495a6bd48ad278e78f880a54d583024491786d

  • SHA512

    3d81ae0131c6fc531d0592259d5cf7296aa61487de785e5b534a696867ae9ef8abae19aa1b938a62db6492af38829dfdbeb7da0d69ba2253b26cb8dd41d8bc83

  • SSDEEP

    384:1bGThpZmtWqjV0rABs4q56hDLApNEKYZWVOggl6k4+jQukJs0yjW:1bSutWvkBsXqApNTuB/7jeRH

Score
8/10
bootkitevasionpersistence

Malware Config

Targets

    • Target

      Obekräftade 309647.crdownload

    • Size

      43KB

    • MD5

      f6aa0dd947ff84db2c0e991aab776dcc

    • SHA1

      73d377c8d4b7d04ac9fd6c47d74491d76ca6cf6e

    • SHA256

      2ab5f10366ebad9e4af9369730495a6bd48ad278e78f880a54d583024491786d

    • SHA512

      3d81ae0131c6fc531d0592259d5cf7296aa61487de785e5b534a696867ae9ef8abae19aa1b938a62db6492af38829dfdbeb7da0d69ba2253b26cb8dd41d8bc83

    • SSDEEP

      384:1bGThpZmtWqjV0rABs4q56hDLApNEKYZWVOggl6k4+jQukJs0yjW:1bSutWvkBsXqApNTuB/7jeRH

    Score
    8/10
    bootkitevasionpersistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks