Overview

overview

6

Static

static

3

winprofile

windows7-x64

6

winprofile

windows10-1703-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98c85e3d7d263c54792d80bc4b29a55108fc380345ef1cc20d39bb2b192741a6

  • Size

    641KB

  • Sample

    240418-2wt1csac6w

  • MD5

    a0da33ce20d47166aa47fa196dd013d8

  • SHA1

    0bc6d9dc087ff9a3ef65d99aef0cdbe989a5d436

  • SHA256

    98c85e3d7d263c54792d80bc4b29a55108fc380345ef1cc20d39bb2b192741a6

  • SHA512

    9b98a7d2c47c745dff5325089c748314f232595121f9cd2d9f440a5cfb3cb3e0a7cd86fb5bd82f3e62fc1cd79489629091fec518333c4711cea3563da3888931

  • SSDEEP

    12288:Kmj43pycq2QOP8cJNMqFWcFuXzNU40U7MniiSNis:Kr3pW2QOPrJbFWc4XhkUEcNX

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      98c85e3d7d263c54792d80bc4b29a55108fc380345ef1cc20d39bb2b192741a6

    • Size

      641KB

    • MD5

      a0da33ce20d47166aa47fa196dd013d8

    • SHA1

      0bc6d9dc087ff9a3ef65d99aef0cdbe989a5d436

    • SHA256

      98c85e3d7d263c54792d80bc4b29a55108fc380345ef1cc20d39bb2b192741a6

    • SHA512

      9b98a7d2c47c745dff5325089c748314f232595121f9cd2d9f440a5cfb3cb3e0a7cd86fb5bd82f3e62fc1cd79489629091fec518333c4711cea3563da3888931

    • SSDEEP

      12288:Kmj43pycq2QOP8cJNMqFWcFuXzNU40U7MniiSNis:Kr3pW2QOPrJbFWc4XhkUEcNX

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks