General
-
Target
88f2c932b70a532e7ac7173a7ff9de11c27caaa514dc8019cb6319d0b0b88aba
-
Size
10.2MB
-
Sample
240524-c3eftaac52
-
MD5
4da32f1f0b1dac90157f53b293a95f08
-
SHA1
acbeb60776e715cea2e06d79d2608446919789de
-
SHA256
88f2c932b70a532e7ac7173a7ff9de11c27caaa514dc8019cb6319d0b0b88aba
-
SHA512
1b93e41cc5c8c8a4d02c4cea18f46f48a7c74511b69c1b2677e1e320cf6fe8ac803d3dd0654c3349ca5009b06ea0bc9fb5cd300e10981e77057ba73cb4e22c13
-
SSDEEP
196608:A8FHCu5uL1zRjyrQpcs+TYm3El87p8oF6eQoIK5CsC0H1F/oeVOX:VHn5uerQp1iEO7R6PK5CsC0z
Static task
static1
Behavioral task
behavioral1
Sample
88f2c932b70a532e7ac7173a7ff9de11c27caaa514dc8019cb6319d0b0b88aba.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
88f2c932b70a532e7ac7173a7ff9de11c27caaa514dc8019cb6319d0b0b88aba
-
Size
10.2MB
-
MD5
4da32f1f0b1dac90157f53b293a95f08
-
SHA1
acbeb60776e715cea2e06d79d2608446919789de
-
SHA256
88f2c932b70a532e7ac7173a7ff9de11c27caaa514dc8019cb6319d0b0b88aba
-
SHA512
1b93e41cc5c8c8a4d02c4cea18f46f48a7c74511b69c1b2677e1e320cf6fe8ac803d3dd0654c3349ca5009b06ea0bc9fb5cd300e10981e77057ba73cb4e22c13
-
SSDEEP
196608:A8FHCu5uL1zRjyrQpcs+TYm3El87p8oF6eQoIK5CsC0H1F/oeVOX:VHn5uerQp1iEO7R6PK5CsC0z
-
Detect Blackmoon payload
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-