Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
14/03/2024, 06:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecureBootUEFI.dll
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecureBootUEFI.dll
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
SecureBootUEFI.dll
-
Size
224KB
-
MD5
18fdde4bf8d3a369514b0bc8ddcf35dc
-
SHA1
c76be590674f9d51e8f70e93fac2f61bbd64d299
-
SHA256
9b38b0e842ecc45576a47318429cb7daa6d6c6da2a1600931773c3a4d3f317a7
-
SHA512
cd60c94c907325e7b3e288187192f4d3ce3389ff8cbe7a861d96cc2d653287eaa2750b977f92d5e50bf64268d95c6f57f0f4323125aa55f78ddba9dde9ca7a30
-
SSDEEP
6144:Yaf2kEDNa5rcf3KATHjhPZnC5HpF7GcH:YjDNa5rw6ATZyHp
Score
8/10
Malware Config
Signatures
-
Blocklisted process makes network request 3 IoCs
flow pid Process 2 3924 rundll32.exe 10 3924 rundll32.exe 11 3924 rundll32.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 1 bitbucket.org 2 bitbucket.org