Overview

overview

6

Static

static

1

6ceb08f468...4a.exe

windows7-x64

6

6ceb08f468...4a.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a

  • Size

    2.3MB

  • Sample

    240525-2t9ysseb62

  • MD5

    638359da4da37381f43128fc8eb6a546

  • SHA1

    92fda308a7c80df157284bc5d6c5474593419285

  • SHA256

    6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a

  • SHA512

    b93adaf03054a45e1a00eab977fcd8fb3e0ffc72858cbfac5c31fea2186e962792c96a252728b5d6f0a7191e12ec7493f6647d79e41ae079c19d1f74e4a2a018

  • SSDEEP

    49152:S+dCc5rV1M9P8/ra72Nh43cv5LeTt9JX8s/L8jJvLsnYZd6kd9AFqAqr+:S+dCc5k9PArS2/xLeTZdT8jJLsYrbAmK

Score
6/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a

    • Size

      2.3MB

    • MD5

      638359da4da37381f43128fc8eb6a546

    • SHA1

      92fda308a7c80df157284bc5d6c5474593419285

    • SHA256

      6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a

    • SHA512

      b93adaf03054a45e1a00eab977fcd8fb3e0ffc72858cbfac5c31fea2186e962792c96a252728b5d6f0a7191e12ec7493f6647d79e41ae079c19d1f74e4a2a018

    • SSDEEP

      49152:S+dCc5rV1M9P8/ra72Nh43cv5LeTt9JX8s/L8jJvLsnYZd6kd9AFqAqr+:S+dCc5k9PArS2/xLeTZdT8jJLsYrbAmK

    Score
    6/10
    bootkitevasionpersistencetrojan

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks