Overview

overview

7

Static

static

7

SecuriteIn...06.exe

windows7-x64

7

SecuriteIn...06.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    SecuriteInfo.com.Riskware.00584baa1.7035.19406.exe

  • Size

    1.3MB

  • Sample

    240509-pjwl7sca73

  • MD5

    5589728917e2c441a0b277d8048dea99

  • SHA1

    28d60f957570983336dfc6fd05c6be54bab43fa1

  • SHA256

    ffa291b7deb01d6a42d6997765848e0340bf5177746de01d275f843cdea864aa

  • SHA512

    8824c3ce8437261fdb7dbc06c43c4e9073ffdfa9eb481dad582300727290ed7c9a78a114bc823415d72ed7594cb3ef696bbbcdbdfd623c3ccd8229509306628a

  • SSDEEP

    24576:Fi+wfDe4soMiFgmj3rRLzRqDh8btwO6ijE5VA2TUBfnrZD:IDd3gmj3tLgDhqtwOf32opV

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      SecuriteInfo.com.Riskware.00584baa1.7035.19406.exe

    • Size

      1.3MB

    • MD5

      5589728917e2c441a0b277d8048dea99

    • SHA1

      28d60f957570983336dfc6fd05c6be54bab43fa1

    • SHA256

      ffa291b7deb01d6a42d6997765848e0340bf5177746de01d275f843cdea864aa

    • SHA512

      8824c3ce8437261fdb7dbc06c43c4e9073ffdfa9eb481dad582300727290ed7c9a78a114bc823415d72ed7594cb3ef696bbbcdbdfd623c3ccd8229509306628a

    • SSDEEP

      24576:Fi+wfDe4soMiFgmj3rRLzRqDh8btwO6ijE5VA2TUBfnrZD:IDd3gmj3tLgDhqtwOf32opV

    Score
    7/10
    bootkitpersistenceupx

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks