Overview

overview

7

Static

static

1

faf65515e7...8a.exe

windows7-x64

7

faf65515e7...8a.exe

windows10-2004-x64

7

lzlh.exe

windows7-x64

1

lzlh.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    faf65515e7d8ab1be66ac53079f50482740a0cdcb623ec9e65ace573bedceb8a.exe

  • Size

    459KB

  • Sample

    240309-e343ksde81

  • MD5

    2e868ea1b1207b4c88944e6ca968e5c0

  • SHA1

    a458ea640c02944ed604af9105ee626d7ccbf450

  • SHA256

    faf65515e7d8ab1be66ac53079f50482740a0cdcb623ec9e65ace573bedceb8a

  • SHA512

    604f59fb1d1d7b4356817a402415c68815d61886460e20799ff74907dc61fb4ccf9bba513800a472e95981925d86a504225dc1bb7803a2d5e2e6b2534eb1d5d6

  • SSDEEP

    12288:l0klQ4GUW7sa0dX50I9h8MWQ6hV2jMB4pky:+43W7sa0dX50I9h16hV2jBv

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      faf65515e7d8ab1be66ac53079f50482740a0cdcb623ec9e65ace573bedceb8a.exe

    • Size

      459KB

    • MD5

      2e868ea1b1207b4c88944e6ca968e5c0

    • SHA1

      a458ea640c02944ed604af9105ee626d7ccbf450

    • SHA256

      faf65515e7d8ab1be66ac53079f50482740a0cdcb623ec9e65ace573bedceb8a

    • SHA512

      604f59fb1d1d7b4356817a402415c68815d61886460e20799ff74907dc61fb4ccf9bba513800a472e95981925d86a504225dc1bb7803a2d5e2e6b2534eb1d5d6

    • SSDEEP

      12288:l0klQ4GUW7sa0dX50I9h8MWQ6hV2jMB4pky:+43W7sa0dX50I9h16hV2jBv

    Score
    7/10
    bootkitdiscoverypersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

    • Target

      lzlh.exe

    • Size

      1.9MB

    • MD5

      5ba2235bb9de7b23016a9f64fd07e9f1

    • SHA1

      48830f67f6821985a933e1e5f96d2e3cf5c10391

    • SHA256

      fb479e97fad7d4f50c9ff18cb3fd3b76b6c31f1d3cfacf14acaa7fb1578b2927

    • SHA512

      e3412fbcfc9ed86afcddb4331b07e60689c097457f8c9d99baf851c6ac266949866d83c4a6bb37e0f4a2f65ba8627d166b49005e58bb383a118333c297d45772

    • SSDEEP

      12288:u2gniMgd+n9ACUFn8M2pzCscflDwMqww2zG3vs8pwRaCdK3lMshtGMiTFoa0B:VlMgdymCdM2zC5Dwtww2zG3AT5a

    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks