Overview

overview

7

Static

static

3

0e07283bb6...a9.exe

windows7-x64

7

0e07283bb6...a9.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    0e07283bb6da54af5c14e6d2bcdfb83b89d04c2a4c2ef7fd61cf38762216a4a9

  • Size

    5.7MB

  • Sample

    240523-2rjntscb39

  • MD5

    4fc682b0628c80a4e6688c6eba078857

  • SHA1

    e5ebcbd345071a26bee487d60a68c57517c2212c

  • SHA256

    0e07283bb6da54af5c14e6d2bcdfb83b89d04c2a4c2ef7fd61cf38762216a4a9

  • SHA512

    040015d70da7a8f7b6a9838e68caa3fbd0eb03548ee7930732a66b56c4ec9ec854cb9f815d08f3759cb09ac970969caa202eaf1f96a870e0abca66d10aa60b52

  • SSDEEP

    98304:52NRGew2u8OaZLXCyBBl81cWbfWvToRWOV3TDiR062DhfKJxXF9:uGb2zJTCyBBl8mWbOvm3iR8D9Kzz

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      0e07283bb6da54af5c14e6d2bcdfb83b89d04c2a4c2ef7fd61cf38762216a4a9

    • Size

      5.7MB

    • MD5

      4fc682b0628c80a4e6688c6eba078857

    • SHA1

      e5ebcbd345071a26bee487d60a68c57517c2212c

    • SHA256

      0e07283bb6da54af5c14e6d2bcdfb83b89d04c2a4c2ef7fd61cf38762216a4a9

    • SHA512

      040015d70da7a8f7b6a9838e68caa3fbd0eb03548ee7930732a66b56c4ec9ec854cb9f815d08f3759cb09ac970969caa202eaf1f96a870e0abca66d10aa60b52

    • SSDEEP

      98304:52NRGew2u8OaZLXCyBBl81cWbfWvToRWOV3TDiR062DhfKJxXF9:uGb2zJTCyBBl8mWbOvm3iR8D9Kzz

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks