Overview

overview

7

Static

static

7

031d2aa906...2b.exe

windows7-x64

7

031d2aa906...2b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    031d2aa9060606293d8d8e0e3f82ba6564ea5b0eb323814ed7264952f299b22b

  • Size

    621KB

  • Sample

    240524-edmr1aca64

  • MD5

    8e6a02692dccebcb6d3cff3194aa4e64

  • SHA1

    5242f4027d8b469ed3c6fbeecb44132b67640c0a

  • SHA256

    031d2aa9060606293d8d8e0e3f82ba6564ea5b0eb323814ed7264952f299b22b

  • SHA512

    2cf26cef2292d7580101f3a7b86dc9dc7ec770ce0e1776994f8c31d47db94f82f744747c72667e4376f9ba4706da83fef2956152eba46e0965d0b56b2ec675e5

  • SSDEEP

    12288:L8hn/QAuoiDa6n+ljpWjK8TJLz+cjWk9TfhKR5v+72L4AYLdPEm2kdFE:L70ipm0jmcSOhGA+uM6de

Score
7/10
bootkitpersistencespywarestealerupx

Malware Config

Targets

    • Target

      031d2aa9060606293d8d8e0e3f82ba6564ea5b0eb323814ed7264952f299b22b

    • Size

      621KB

    • MD5

      8e6a02692dccebcb6d3cff3194aa4e64

    • SHA1

      5242f4027d8b469ed3c6fbeecb44132b67640c0a

    • SHA256

      031d2aa9060606293d8d8e0e3f82ba6564ea5b0eb323814ed7264952f299b22b

    • SHA512

      2cf26cef2292d7580101f3a7b86dc9dc7ec770ce0e1776994f8c31d47db94f82f744747c72667e4376f9ba4706da83fef2956152eba46e0965d0b56b2ec675e5

    • SSDEEP

      12288:L8hn/QAuoiDa6n+ljpWjK8TJLz+cjWk9TfhKR5v+72L4AYLdPEm2kdFE:L70ipm0jmcSOhGA+uM6de

    Score
    7/10
    bootkitpersistencespywarestealerupx

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks