Overview

overview

7

Static

static

3

e3316a22cd...0a.exe

windows7-x64

7

e3316a22cd...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e3316a22cd2d9ac8d004a666ec37f6394dea725791e483790e543c95fea0680a

  • Size

    2.0MB

  • Sample

    240525-xs88naeg6w

  • MD5

    3cb846a87f7680b3e2963d7ef3604db5

  • SHA1

    f08030241fccc6b832468f607405d7a4e5c4e137

  • SHA256

    e3316a22cd2d9ac8d004a666ec37f6394dea725791e483790e543c95fea0680a

  • SHA512

    558bd9225e86251b31d55459cc267fec75ac2573e0f161c95b0dc765c6ef264f765af24f0390d020d53b37f57ee5812b75eb00d678f5f687794a6c372475dd54

  • SSDEEP

    24576:zt6/EQTelL3j9Uvbq7Frn/WVZQC3qOazxjodGjeNittkpAVRTZIjDPG3ib3tuuXJ:z/Uvbq7UoC3gxVtIAV+RZuuJa0

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      e3316a22cd2d9ac8d004a666ec37f6394dea725791e483790e543c95fea0680a

    • Size

      2.0MB

    • MD5

      3cb846a87f7680b3e2963d7ef3604db5

    • SHA1

      f08030241fccc6b832468f607405d7a4e5c4e137

    • SHA256

      e3316a22cd2d9ac8d004a666ec37f6394dea725791e483790e543c95fea0680a

    • SHA512

      558bd9225e86251b31d55459cc267fec75ac2573e0f161c95b0dc765c6ef264f765af24f0390d020d53b37f57ee5812b75eb00d678f5f687794a6c372475dd54

    • SSDEEP

      24576:zt6/EQTelL3j9Uvbq7Frn/WVZQC3qOazxjodGjeNittkpAVRTZIjDPG3ib3tuuXJ:z/Uvbq7UoC3gxVtIAV+RZuuJa0

    Score
    7/10
    bootkitpersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks