Overview

overview

10

Static

static

10

c28ed60c48...3b.exe

windows7-x64

7

c28ed60c48...3b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c28ed60c480b4bcef1f83334b56df25f4ac95db92fe150030d7fd2f12b05183b

  • Size

    1.1MB

  • Sample

    240522-rw3x6aee5z

  • MD5

    9ffd1931c316b882683d87dd1050d8e3

  • SHA1

    9d07ec6e678af5606870436e270f9aceb42a1f15

  • SHA256

    c28ed60c480b4bcef1f83334b56df25f4ac95db92fe150030d7fd2f12b05183b

  • SHA512

    20b2a0f23bfb5f6de06a2bb93a8262a934c8870e8ba1dc19e9028822dda6390aec92889440950150434af231e56bf242902fd06ad72e3423529af863b809e11d

  • SSDEEP

    24576:U5AM2KZA9dG+SbJoDWW3eDoBbbT9LNDigHb2WyTUZ0ed2jaQFjZuj4R:UEm+RaW0oRJLNR729TZecjJFVu0R

Score
10/10
blackmoonbootkitpersistenceupx

Malware Config

Targets

    • Target

      c28ed60c480b4bcef1f83334b56df25f4ac95db92fe150030d7fd2f12b05183b

    • Size

      1.1MB

    • MD5

      9ffd1931c316b882683d87dd1050d8e3

    • SHA1

      9d07ec6e678af5606870436e270f9aceb42a1f15

    • SHA256

      c28ed60c480b4bcef1f83334b56df25f4ac95db92fe150030d7fd2f12b05183b

    • SHA512

      20b2a0f23bfb5f6de06a2bb93a8262a934c8870e8ba1dc19e9028822dda6390aec92889440950150434af231e56bf242902fd06ad72e3423529af863b809e11d

    • SSDEEP

      24576:U5AM2KZA9dG+SbJoDWW3eDoBbbT9LNDigHb2WyTUZ0ed2jaQFjZuj4R:UEm+RaW0oRJLNR729TZecjJFVu0R

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks