Overview

overview

9

Static

static

3

3538bd47de...15.exe

windows7-x64

9

3538bd47de...15.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3538bd47de34ef8bfa07cd62ba6f5dd2c1ccf8260dcd7fce66b08c46d2b1b315.exe

  • Size

    509KB

  • Sample

    240523-bpvp7sgc4x

  • MD5

    6d417bb7eac8279800a3dbd79eb231bd

  • SHA1

    a73b9bd5f6ba51f64ff3c6797b77770615d12077

  • SHA256

    3538bd47de34ef8bfa07cd62ba6f5dd2c1ccf8260dcd7fce66b08c46d2b1b315

  • SHA512

    58f708983a47953f29bdbadb4ad2c0e1de46b1932b0d3be0ff44b7b96f2444cde3ef29f0a3c1506903d60179ddfbdc9ac9355a873bc2c3bbcce0bbaa6370ad6d

  • SSDEEP

    12288:In1VHR6R/sqEMuwPNQxLviNv9uiOYf+ftEIoy6:In1+R/sqD9uizFOltEIoy

Score
9/10
bootkitpersistence

Malware Config

Targets

    • Target

      3538bd47de34ef8bfa07cd62ba6f5dd2c1ccf8260dcd7fce66b08c46d2b1b315.exe

    • Size

      509KB

    • MD5

      6d417bb7eac8279800a3dbd79eb231bd

    • SHA1

      a73b9bd5f6ba51f64ff3c6797b77770615d12077

    • SHA256

      3538bd47de34ef8bfa07cd62ba6f5dd2c1ccf8260dcd7fce66b08c46d2b1b315

    • SHA512

      58f708983a47953f29bdbadb4ad2c0e1de46b1932b0d3be0ff44b7b96f2444cde3ef29f0a3c1506903d60179ddfbdc9ac9355a873bc2c3bbcce0bbaa6370ad6d

    • SSDEEP

      12288:In1VHR6R/sqEMuwPNQxLviNv9uiOYf+ftEIoy6:In1+R/sqD9uizFOltEIoy

    Score
    9/10
    bootkitpersistence

    • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003)

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks