Overview

overview

6

Static

static

1

Setup.exe

windows11-21h2-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    422.3MB

  • Sample

    240420-pxcfgsgh95

  • MD5

    beb0a597cd51c95a90886991b964aaf5

  • SHA1

    2522b42cd3364397d8e58bba9310be544dff6cf3

  • SHA256

    8858136d43dc759c34b2ff881cba301175b79b156113e9f606acdbc2216f97f1

  • SHA512

    0073e87348fd2ed08f85e3e6e1f1ef8a7baa350ac7a8ef23bc475c54da7a57501392f88570460569c737e927fc817efc349883cc3caaeebb2e6e8386626950d5

  • SSDEEP

    6291456:PvdhHQBL5PotLMoTYR9sCggSeckmAAAsl9LKBNvBqQA97N/yfE+exR/XfsDIK/65:PoFRotLpTyNr2A2XLewQyKkffK/6+I

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      422.3MB

    • MD5

      beb0a597cd51c95a90886991b964aaf5

    • SHA1

      2522b42cd3364397d8e58bba9310be544dff6cf3

    • SHA256

      8858136d43dc759c34b2ff881cba301175b79b156113e9f606acdbc2216f97f1

    • SHA512

      0073e87348fd2ed08f85e3e6e1f1ef8a7baa350ac7a8ef23bc475c54da7a57501392f88570460569c737e927fc817efc349883cc3caaeebb2e6e8386626950d5

    • SSDEEP

      6291456:PvdhHQBL5PotLMoTYR9sCggSeckmAAAsl9LKBNvBqQA97N/yfE+exR/XfsDIK/65:PoFRotLpTyNr2A2XLewQyKkffK/6+I

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks