Overview

overview

8

Static

static

3

0d13f10ee7...a2.dll

windows7-x64

8

0d13f10ee7...a2.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0d13f10ee700c117477011784fd404780fa86504a8976f7d1e4e45a00c963fa2

  • Size

    5.0MB

  • Sample

    240523-1sr6xsac6z

  • MD5

    a7e65143d36eb40c13d04b26cfce91c7

  • SHA1

    192974951ec6158099569c957540cd0b6dc838a2

  • SHA256

    0d13f10ee700c117477011784fd404780fa86504a8976f7d1e4e45a00c963fa2

  • SHA512

    100f1e2aac82d81f7a45ceddb90680627e3d5f512ffd883dafb9594eaa96123c228add73b0b21aa1920c398922b1032b0895427c04436be54cad7e775247f618

  • SSDEEP

    98304:PGuOaRQyiAPGLD8f5eIBOxHQT3xma1BPepZUsx6HTpKVc:hRQyTheIUedVBGpZUg6HTpd

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      0d13f10ee700c117477011784fd404780fa86504a8976f7d1e4e45a00c963fa2

    • Size

      5.0MB

    • MD5

      a7e65143d36eb40c13d04b26cfce91c7

    • SHA1

      192974951ec6158099569c957540cd0b6dc838a2

    • SHA256

      0d13f10ee700c117477011784fd404780fa86504a8976f7d1e4e45a00c963fa2

    • SHA512

      100f1e2aac82d81f7a45ceddb90680627e3d5f512ffd883dafb9594eaa96123c228add73b0b21aa1920c398922b1032b0895427c04436be54cad7e775247f618

    • SSDEEP

      98304:PGuOaRQyiAPGLD8f5eIBOxHQT3xma1BPepZUsx6HTpKVc:hRQyTheIUedVBGpZUg6HTpd

    Score
    8/10
    bootkitpersistence

    • Blocklisted process makes network request

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks