General
-
Target
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a
-
Size
2.4MB
-
Sample
240525-vphkesbd7x
-
MD5
eb1c6183152f4ff609455cf3f8908ab3
-
SHA1
87d96a964f3ed3f5f7f7d2056fd45ade3caa87f4
-
SHA256
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a
-
SHA512
5402ad2bd055a02a4cd148869ccbba1318090b58dd3332a24a7ac79827e754c6e46005f06cc8e82d8c6ca3d401f743c79bb1c6b97b804909413618b2b91e1613
-
SSDEEP
49152:JoNgRf9tTkvqHWzKVcBd6o6nt2rK09G4lyo0ZacSiLUswRI/CIJa:J+Qf7cqA0bt2rK09cohiLUbQJJa
Static task
static1
Behavioral task
behavioral1
Sample
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a
-
Size
2.4MB
-
MD5
eb1c6183152f4ff609455cf3f8908ab3
-
SHA1
87d96a964f3ed3f5f7f7d2056fd45ade3caa87f4
-
SHA256
5be83c719983ac2566ea310ab30530102308490e3a302aa888143119c6b1bf3a
-
SHA512
5402ad2bd055a02a4cd148869ccbba1318090b58dd3332a24a7ac79827e754c6e46005f06cc8e82d8c6ca3d401f743c79bb1c6b97b804909413618b2b91e1613
-
SSDEEP
49152:JoNgRf9tTkvqHWzKVcBd6o6nt2rK09G4lyo0ZacSiLUswRI/CIJa:J+Qf7cqA0bt2rK09cohiLUbQJJa
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-