Overview

overview

7

Static

static

3

6407cdb3f0...b3.exe

windows7-x64

7

6407cdb3f0...b3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6407cdb3f06e124045fcada73f5df43965bb5bdfc6d07085c12029a6b38ff1b3

  • Size

    10.0MB

  • Sample

    240419-g24frsbg6x

  • MD5

    66219024e53de4e027031aa9d6ebcc82

  • SHA1

    7df545baddc768d329d65e58356233ca6a81da56

  • SHA256

    6407cdb3f06e124045fcada73f5df43965bb5bdfc6d07085c12029a6b38ff1b3

  • SHA512

    c50401e4b395dfc70ca8d92ca8513c3bfef943c594f26d97ab3561b5fbe14c043a892c5c5c77f4aa2e967ab5682462aeb7d26c7f889adb7d52b4be37659197dc

  • SSDEEP

    196608:m14UdVEy9qMBNLtIwzPKf0IuX8CAd2XsYsALjC:E4UdVEy9qMBNLtRl/XLFdPC

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      6407cdb3f06e124045fcada73f5df43965bb5bdfc6d07085c12029a6b38ff1b3

    • Size

      10.0MB

    • MD5

      66219024e53de4e027031aa9d6ebcc82

    • SHA1

      7df545baddc768d329d65e58356233ca6a81da56

    • SHA256

      6407cdb3f06e124045fcada73f5df43965bb5bdfc6d07085c12029a6b38ff1b3

    • SHA512

      c50401e4b395dfc70ca8d92ca8513c3bfef943c594f26d97ab3561b5fbe14c043a892c5c5c77f4aa2e967ab5682462aeb7d26c7f889adb7d52b4be37659197dc

    • SSDEEP

      196608:m14UdVEy9qMBNLtIwzPKf0IuX8CAd2XsYsALjC:E4UdVEy9qMBNLtRl/XLFdPC

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks