Overview

overview

7

Static

static

7

ad7ed73208...35.exe

windows7-x64

7

ad7ed73208...35.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad7ed732083b41d6725f6a0a14917335

  • Size

    205KB

  • Sample

    240229-c95atabg66

  • MD5

    ad7ed732083b41d6725f6a0a14917335

  • SHA1

    85a5774009577f8d4788c6fc90d56e151e5449cf

  • SHA256

    b53625690cfc193ed75781ae646705f8f2e089eabac9e98ac12281b399fdd4f4

  • SHA512

    c4b89bdf01887c584f66ce9a9f23c6984e0a2283e0f5f40902b54ff558a96451caaa329810d22a50c99764400ace175e0872f89e45dcf7302142ea87d5aff43c

  • SSDEEP

    3072:Njj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrW9PzT9Tqp85:l0hfPqsPFbrBLAxNIKgUgk16yrWlT1z

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ad7ed732083b41d6725f6a0a14917335

    • Size

      205KB

    • MD5

      ad7ed732083b41d6725f6a0a14917335

    • SHA1

      85a5774009577f8d4788c6fc90d56e151e5449cf

    • SHA256

      b53625690cfc193ed75781ae646705f8f2e089eabac9e98ac12281b399fdd4f4

    • SHA512

      c4b89bdf01887c584f66ce9a9f23c6984e0a2283e0f5f40902b54ff558a96451caaa329810d22a50c99764400ace175e0872f89e45dcf7302142ea87d5aff43c

    • SSDEEP

      3072:Njj0hnS0Pq9iFlfXFbrSCXe6A9b39XYKgajbLD8FQ7h1DEZBxyrW9PzT9Tqp85:l0hfPqsPFbrBLAxNIKgUgk16yrWlT1z

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks