Overview

overview

6

Static

static

1

CrystalDis..._3.exe

windows10-1703-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CrystalDiskInfo9_2_3.exe

  • Size

    5.6MB

  • Sample

    240314-syeh1shh32

  • MD5

    3f7cc19ed8e485a42084202b0107ccae

  • SHA1

    0b3cb892bb55aabab07de752bcc3a71ed5ee2cb5

  • SHA256

    05fe4627d29a54162948ef9a9380b6258e126b8a966ce4148a9745c330da0be4

  • SHA512

    96ee026e9464592deefc6fed2119ad8f31dd8af0389959eb9f71891a2e1dc35fdb2c22448cd3e3e6d5fcf34e82e5e17094266ef04611a54f0babe04690253e1c

  • SSDEEP

    98304:NkL62ARYIu9INl7Tm5/8AgQiZizYvsaViIm47EIKTh6+SkbnCnIRNw2W9GttlNUA:+gJuOtmF8qK2dJDV60CnEya

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      CrystalDiskInfo9_2_3.exe

    • Size

      5.6MB

    • MD5

      3f7cc19ed8e485a42084202b0107ccae

    • SHA1

      0b3cb892bb55aabab07de752bcc3a71ed5ee2cb5

    • SHA256

      05fe4627d29a54162948ef9a9380b6258e126b8a966ce4148a9745c330da0be4

    • SHA512

      96ee026e9464592deefc6fed2119ad8f31dd8af0389959eb9f71891a2e1dc35fdb2c22448cd3e3e6d5fcf34e82e5e17094266ef04611a54f0babe04690253e1c

    • SSDEEP

      98304:NkL62ARYIu9INl7Tm5/8AgQiZizYvsaViIm47EIKTh6+SkbnCnIRNw2W9GttlNUA:+gJuOtmF8qK2dJDV60CnEya

    Score
    6/10
    bootkitdiscoverypersistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks