Overview

overview

7

Static

static

3

843044238f...c3.exe

windows7-x64

7

843044238f...c3.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    843044238f9a0cd0610f0c8cb6321f57af75185497d1729b693c19782164bac3

  • Size

    11.6MB

  • Sample

    240524-d9xreabg84

  • MD5

    4a5b6655693f6e515c031234e64d54cc

  • SHA1

    2c3a053d06d258e0a05c25f34da37bbe2ac66043

  • SHA256

    843044238f9a0cd0610f0c8cb6321f57af75185497d1729b693c19782164bac3

  • SHA512

    79caff70c7dea96dd729a22d440bfc9e81eb14846b84a508aea3af247294471b37be92f3166cf80e36d1db6b6a321e377fd5b17a0207652a3e16046d1e3ed077

  • SSDEEP

    196608:fiOiHDI/zJVYCLc9BDal6mpRx5CbOmmPPK6YmQXe:fiVKztc9sMmpRPCbOVPPimQXe

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      843044238f9a0cd0610f0c8cb6321f57af75185497d1729b693c19782164bac3

    • Size

      11.6MB

    • MD5

      4a5b6655693f6e515c031234e64d54cc

    • SHA1

      2c3a053d06d258e0a05c25f34da37bbe2ac66043

    • SHA256

      843044238f9a0cd0610f0c8cb6321f57af75185497d1729b693c19782164bac3

    • SHA512

      79caff70c7dea96dd729a22d440bfc9e81eb14846b84a508aea3af247294471b37be92f3166cf80e36d1db6b6a321e377fd5b17a0207652a3e16046d1e3ed077

    • SSDEEP

      196608:fiOiHDI/zJVYCLc9BDal6mpRx5CbOmmPPK6YmQXe:fiVKztc9sMmpRPCbOVPPimQXe

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks