Overview

overview

8

Static

static

1

kaspersky4...56.exe

windows11-21h2-x64

8

Resubmissions

22/04/2024, 19:07

240422-xsrzdaeh9x 8

22/04/2024, 18:35

240422-w8jghaef8z 6

22/04/2024, 18:12

240422-wtdbyaed8x 8

22/04/2024, 18:01

240422-wl3xmaeb79 6

Sharing

Copy URL Twitter E-mail

General

  • Target

    kaspersky4win202121.16.6.467ru_45356.exe

  • Size

    4.3MB

  • Sample

    240422-xsrzdaeh9x

  • MD5

    d9b84cc79b34ed577ce4882ef496d93e

  • SHA1

    fc1ea414cd738328cf66cdef303da308b9798880

  • SHA256

    846adcf4d156803c03df9c9e4f9a04114228d82b2c7bcfb41440af6a9acb7b65

  • SHA512

    733298c54eba2d32f323bd16aba6f8411432bffa1cefdb36a0aeed46f2c3645be2aa22d5b56c2ad936a737fa077b9e7e18e8ef484ceb39b527f586f989ff5a34

  • SSDEEP

    98304:DO/RG6GkIN84klIci68xyDC2YmoieSoaSiHFnI6ts3/l:OG24kDi6s2YBieS96/l

Score
8/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      kaspersky4win202121.16.6.467ru_45356.exe

    • Size

      4.3MB

    • MD5

      d9b84cc79b34ed577ce4882ef496d93e

    • SHA1

      fc1ea414cd738328cf66cdef303da308b9798880

    • SHA256

      846adcf4d156803c03df9c9e4f9a04114228d82b2c7bcfb41440af6a9acb7b65

    • SHA512

      733298c54eba2d32f323bd16aba6f8411432bffa1cefdb36a0aeed46f2c3645be2aa22d5b56c2ad936a737fa077b9e7e18e8ef484ceb39b527f586f989ff5a34

    • SSDEEP

      98304:DO/RG6GkIN84klIci68xyDC2YmoieSoaSiHFnI6ts3/l:OG24kDi6s2YBieS96/l

    Score
    8/10
    bootkitevasionpersistencetrojan

    • Drops file in Drivers directory

    • Blocklisted process makes network request

    • Checks for any installed AV software in registry

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks