Overview

overview

7

Static

static

7

ad69600bd8...04.exe

windows7-x64

7

ad69600bd8...04.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad69600bd85140f31e11ce5da322f604

  • Size

    226KB

  • Sample

    240229-cg6yyaah6s

  • MD5

    ad69600bd85140f31e11ce5da322f604

  • SHA1

    01e4781d7e55a8f0abcfbea290c7f57acd8e81f3

  • SHA256

    db330e0c81f3d21001336bd9ae5902d260fdf13434b7595f2d41770900ebc8ec

  • SHA512

    e6762c520226804ccecb918d727e54fb82d5030723a0fcf5eafbcb5ea9ce6e5d77057f6e91aa6d5b70782aa98978372efd6b8d602914018a1c09c1c455123731

  • SSDEEP

    6144:Ki76VJ5rAnZht81P0YArDtPqDONC+Ay0249:97QJ50Dt8FPArDXfA7Z

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ad69600bd85140f31e11ce5da322f604

    • Size

      226KB

    • MD5

      ad69600bd85140f31e11ce5da322f604

    • SHA1

      01e4781d7e55a8f0abcfbea290c7f57acd8e81f3

    • SHA256

      db330e0c81f3d21001336bd9ae5902d260fdf13434b7595f2d41770900ebc8ec

    • SHA512

      e6762c520226804ccecb918d727e54fb82d5030723a0fcf5eafbcb5ea9ce6e5d77057f6e91aa6d5b70782aa98978372efd6b8d602914018a1c09c1c455123731

    • SSDEEP

      6144:Ki76VJ5rAnZht81P0YArDtPqDONC+Ay0249:97QJ50Dt8FPArDXfA7Z

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks