Overview

overview

7

Static

static

7

a16c972d09...53.exe

windows7-x64

7

a16c972d09...53.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a16c972d094318c4f9cc6e9550daeb53

  • Size

    516KB

  • Sample

    240224-khz6safd8x

  • MD5

    a16c972d094318c4f9cc6e9550daeb53

  • SHA1

    02d5f9d5274257ab20ac6a657135f7248db50916

  • SHA256

    505f6f1e7b1fcc12646a2a569dd31f6af4d05fee8109b8541c466b05fc6d94ad

  • SHA512

    0ec6737a0524a3fa68b736c14f06092516dc787ae9870f6264019a807749ad8deaa11bfbceb71bd83f949e74f34828242685df46b28f60c812746e4508ee0dc2

  • SSDEEP

    12288:hwsebt1Yw1s2zn0gMljRJz5YF4uvctghYxGDHCt2BeFOoS:BeIw1Tzn07/Jt2BND+2w

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      a16c972d094318c4f9cc6e9550daeb53

    • Size

      516KB

    • MD5

      a16c972d094318c4f9cc6e9550daeb53

    • SHA1

      02d5f9d5274257ab20ac6a657135f7248db50916

    • SHA256

      505f6f1e7b1fcc12646a2a569dd31f6af4d05fee8109b8541c466b05fc6d94ad

    • SHA512

      0ec6737a0524a3fa68b736c14f06092516dc787ae9870f6264019a807749ad8deaa11bfbceb71bd83f949e74f34828242685df46b28f60c812746e4508ee0dc2

    • SSDEEP

      12288:hwsebt1Yw1s2zn0gMljRJz5YF4uvctghYxGDHCt2BeFOoS:BeIw1Tzn07/Jt2BND+2w

    Score
    7/10
    bootkitpersistenceupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks