General
-
Target
62aaddb36faeace87031ddf7e918b01766565007429ae92c3d67193a285130b5
-
Size
4.2MB
-
Sample
240509-21pw7sbh7z
-
MD5
52778757eddd9dacc293b52e93b6bb00
-
SHA1
d11a75b072365b31573eb72fcc3af1ad143617ff
-
SHA256
62aaddb36faeace87031ddf7e918b01766565007429ae92c3d67193a285130b5
-
SHA512
8f971ba80d8dac5b2258d3fac9b471b37c9c4e663fe684e9cd1a7c8cdfb8bd38f06781c53c0f9dcd790fdd179679285df234e013b7ec2c1f088bfc0b73805422
-
SSDEEP
98304:vstUJNd0eCuGr1RCENsrJ+LrHKLdeQrZD+4Ywj:vsKd0QGBRCENsYHK/rZOS
Static task
static1
Behavioral task
behavioral1
Sample
62aaddb36faeace87031ddf7e918b01766565007429ae92c3d67193a285130b5.exe
Resource
win7-20240215-en
Malware Config
Targets
-
-
Target
62aaddb36faeace87031ddf7e918b01766565007429ae92c3d67193a285130b5
-
Size
4.2MB
-
MD5
52778757eddd9dacc293b52e93b6bb00
-
SHA1
d11a75b072365b31573eb72fcc3af1ad143617ff
-
SHA256
62aaddb36faeace87031ddf7e918b01766565007429ae92c3d67193a285130b5
-
SHA512
8f971ba80d8dac5b2258d3fac9b471b37c9c4e663fe684e9cd1a7c8cdfb8bd38f06781c53c0f9dcd790fdd179679285df234e013b7ec2c1f088bfc0b73805422
-
SSDEEP
98304:vstUJNd0eCuGr1RCENsrJ+LrHKLdeQrZD+4Ywj:vsKd0QGBRCENsYHK/rZOS
-
Glupteba payload
-
Modifies boot configuration data using bcdedit
-
Modifies Windows Firewall
-
Possible attempt to disable PatchGuard
Rootkits can use kernel patching to embed themselves in an operating system.
-