Overview

overview

6

Static

static

1

c230c739f9...24.exe

windows7-x64

6

c230c739f9...24.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02bd5dd672a21a001e4b82e2a6031d30.bin

  • Size

    130KB

  • Sample

    240425-bcrssace38

  • MD5

    7dd68f449e8f1795bbbe57a8698ea49e

  • SHA1

    a6c66597fc942f95d32aae8997086f3e03e1385f

  • SHA256

    7d86c72fa6979baf275cea79284cf935bfea72b91a038ff98064119561015363

  • SHA512

    8d95dc186ac606017b98f8e54845524a60e5d4012fd9f3afefabcf298743b1d94d7c0d018222a3716dd04ca57223a0b48363602ee39946a0e3548d8347b41afb

  • SSDEEP

    3072:ePiJ5eI6xOQEg/QoBy8KUwZBhp/eN3u0OOGUkc3VPUkuOZ:V/6IQEMQoHjwZXtWR3kc3VMkLZ

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      c230c739f9107e8fd871f2158e2299e010679aed34fb419cd8c9acc8cc4a9a24.exe

    • Size

      257KB

    • MD5

      02bd5dd672a21a001e4b82e2a6031d30

    • SHA1

      777476e4e9bab85545e977279572b38d83869261

    • SHA256

      c230c739f9107e8fd871f2158e2299e010679aed34fb419cd8c9acc8cc4a9a24

    • SHA512

      df3cdfae583c8f1a5d7e7ea002b25f2de43490454fc02aff93232276c50d2af73ca3842ac0744ab8b7c30d0f8d1f57c69c97bddef6c520522d4adefa2e902e0a

    • SSDEEP

      3072:z2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhh0rn+x:z0KgGwHqwOOELha+sm2D2+Uhngu0AS

    Score
    6/10
    bootkitpersistence

    • Checks for any installed AV software in registry

    • Downloads MZ/PE file

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks