Overview

overview

7

Static

static

7

066ddc48fe...1a.exe

windows7-x64

7

066ddc48fe...1a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    066ddc48fe39e6aefda79706c4ce399220b275b3133f3c779eb98759aaa71c1a

  • Size

    8.2MB

  • Sample

    240524-kpehnabf2z

  • MD5

    4f73fdf6589c274c465397d0e064fc10

  • SHA1

    70d9113f9424d51de1bc316f312d2dadef519c52

  • SHA256

    066ddc48fe39e6aefda79706c4ce399220b275b3133f3c779eb98759aaa71c1a

  • SHA512

    961b6f28163f4b0cb801774dfb24647b430ec079970291d94e8537ebe1388917c741cdedf0c515bbf1cf135e5df23492246a168e46ab4d1f53e695f7114984cd

  • SSDEEP

    196608:3wFj8Z8i0PVL39vfBqtblegOZoD64zOkF7SpDTc4pCKYKHijTKMk:3wUuNLBCrOZOOkFepDV8W4e

Score
7/10
bootkitpersistencevmprotect

Malware Config

Targets

    • Target

      066ddc48fe39e6aefda79706c4ce399220b275b3133f3c779eb98759aaa71c1a

    • Size

      8.2MB

    • MD5

      4f73fdf6589c274c465397d0e064fc10

    • SHA1

      70d9113f9424d51de1bc316f312d2dadef519c52

    • SHA256

      066ddc48fe39e6aefda79706c4ce399220b275b3133f3c779eb98759aaa71c1a

    • SHA512

      961b6f28163f4b0cb801774dfb24647b430ec079970291d94e8537ebe1388917c741cdedf0c515bbf1cf135e5df23492246a168e46ab4d1f53e695f7114984cd

    • SSDEEP

      196608:3wFj8Z8i0PVL39vfBqtblegOZoD64zOkF7SpDTc4pCKYKHijTKMk:3wUuNLBCrOZOOkFepDV8W4e

    Score
    7/10
    bootkitpersistencevmprotect

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks