Overview

overview

6

Static

static

3

2eb6e79c9f...d0.exe

windows7-x64

6

2eb6e79c9f...d0.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0

  • Size

    4.8MB

  • Sample

    240523-ctaq9sad3w

  • MD5

    63f880de9b45fe6ff4d234e088879e71

  • SHA1

    55146fb6b34652e3e6810911122997d276a82c5c

  • SHA256

    2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0

  • SHA512

    f2bfda6fb31c193f290d76b72d6d1db40ee33b5b41786f3fefb1c73bb24223753b8abbb0f303608e4cbfe0e3c38db914957cb5dbab5ffca9a19e527e593a0863

  • SSDEEP

    98304:R1nW5UuUxP8FH3VthPiG4b/wKhSCafTzsrM:e5sPYkG4jwcS6M

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0

    • Size

      4.8MB

    • MD5

      63f880de9b45fe6ff4d234e088879e71

    • SHA1

      55146fb6b34652e3e6810911122997d276a82c5c

    • SHA256

      2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0

    • SHA512

      f2bfda6fb31c193f290d76b72d6d1db40ee33b5b41786f3fefb1c73bb24223753b8abbb0f303608e4cbfe0e3c38db914957cb5dbab5ffca9a19e527e593a0863

    • SSDEEP

      98304:R1nW5UuUxP8FH3VthPiG4b/wKhSCafTzsrM:e5sPYkG4jwcS6M

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks