Overview

overview

6

Static

static

3

19282c29ab...2a.exe

windows7-x64

6

19282c29ab...2a.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    19282c29ab887c92e77ee8d4bc40ed76c7d149aa33b70648775195ac8bf33d2a

  • Size

    9.2MB

  • Sample

    240524-d9j6babg77

  • MD5

    88b8a5c736bc923f1c5811d9b716535b

  • SHA1

    7a4ce5f7f52a578c21e13ef865e2d45a3fad5f25

  • SHA256

    19282c29ab887c92e77ee8d4bc40ed76c7d149aa33b70648775195ac8bf33d2a

  • SHA512

    2b4a6cfc90b6b1f1d5f7a46ac75fb3117cfd458c8c698f84b1fa04e73f86a371700405ca075c2d1d04f0edec3dffff8400d09a94951283797319073e077f1560

  • SSDEEP

    196608:plLXXy+28tMj7JfRxaSpScs7sSEdJiFnhxqPjktin8frmfiStvS:vXXywtCnQSpULEbiFnhIjzn8juBS

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      19282c29ab887c92e77ee8d4bc40ed76c7d149aa33b70648775195ac8bf33d2a

    • Size

      9.2MB

    • MD5

      88b8a5c736bc923f1c5811d9b716535b

    • SHA1

      7a4ce5f7f52a578c21e13ef865e2d45a3fad5f25

    • SHA256

      19282c29ab887c92e77ee8d4bc40ed76c7d149aa33b70648775195ac8bf33d2a

    • SHA512

      2b4a6cfc90b6b1f1d5f7a46ac75fb3117cfd458c8c698f84b1fa04e73f86a371700405ca075c2d1d04f0edec3dffff8400d09a94951283797319073e077f1560

    • SSDEEP

      196608:plLXXy+28tMj7JfRxaSpScs7sSEdJiFnhxqPjktin8frmfiStvS:vXXywtCnQSpULEbiFnhIjzn8juBS

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks