Overview

overview

6

Static

static

3

5020a6a1c9...93.exe

windows7-x64

6

5020a6a1c9...93.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5020a6a1c90c483035138db71e1e6bafe26de16201d979d234c8d61524b8e393

  • Size

    611KB

  • Sample

    240419-qekjtaec3v

  • MD5

    ab5087baa72a1e8927baa7b6c6af7764

  • SHA1

    80c9599551d1c12deb71dcd2ff2fb37eb96c0512

  • SHA256

    5020a6a1c90c483035138db71e1e6bafe26de16201d979d234c8d61524b8e393

  • SHA512

    fddf3319daa12a802f788dccafdb76bb87cdf1d2fd1247bf98fb049e7da1e5f9fbe8ac0c05089cc78746fb591e3330ea19911f4d96be152d4860efd7027e8f32

  • SSDEEP

    12288:7LSJs6eJ3NF1Pv4Rx3jFcLCuHLsGLaEgJcRO8oNe:7LH9F5AvBcVrszDqOte

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      5020a6a1c90c483035138db71e1e6bafe26de16201d979d234c8d61524b8e393

    • Size

      611KB

    • MD5

      ab5087baa72a1e8927baa7b6c6af7764

    • SHA1

      80c9599551d1c12deb71dcd2ff2fb37eb96c0512

    • SHA256

      5020a6a1c90c483035138db71e1e6bafe26de16201d979d234c8d61524b8e393

    • SHA512

      fddf3319daa12a802f788dccafdb76bb87cdf1d2fd1247bf98fb049e7da1e5f9fbe8ac0c05089cc78746fb591e3330ea19911f4d96be152d4860efd7027e8f32

    • SSDEEP

      12288:7LSJs6eJ3NF1Pv4Rx3jFcLCuHLsGLaEgJcRO8oNe:7LH9F5AvBcVrszDqOte

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks