Overview

overview

6

Static

static

3

03baa3bcc8...46.exe

windows7-x64

6

03baa3bcc8...46.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03baa3bcc8b621e773695bb26ec0f9f6cea31cb146eaed706da1f31022c00e46

  • Size

    3.2MB

  • Sample

    240525-yag7wsga77

  • MD5

    83da08f2d78627bdc82feffee1deb413

  • SHA1

    dcfc4865fcfdbb5eb16b1dadeedf7cbc0cd7c79b

  • SHA256

    03baa3bcc8b621e773695bb26ec0f9f6cea31cb146eaed706da1f31022c00e46

  • SHA512

    d56a7119b0ba4af562fe073508862081c7448954a7a183f6575bee5116f51a5b681ee6702e70a2ca09f591d775bd28e21df6b4052ffa5ee924b191ec77491e43

  • SSDEEP

    98304:f/Q19F4ldvGx3UrDxF6ml7SshFBamOk/wUCW8R9jhQQ:g9FgdvGFUrDxFPles/BpIUt8R9OQ

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      03baa3bcc8b621e773695bb26ec0f9f6cea31cb146eaed706da1f31022c00e46

    • Size

      3.2MB

    • MD5

      83da08f2d78627bdc82feffee1deb413

    • SHA1

      dcfc4865fcfdbb5eb16b1dadeedf7cbc0cd7c79b

    • SHA256

      03baa3bcc8b621e773695bb26ec0f9f6cea31cb146eaed706da1f31022c00e46

    • SHA512

      d56a7119b0ba4af562fe073508862081c7448954a7a183f6575bee5116f51a5b681ee6702e70a2ca09f591d775bd28e21df6b4052ffa5ee924b191ec77491e43

    • SSDEEP

      98304:f/Q19F4ldvGx3UrDxF6ml7SshFBamOk/wUCW8R9jhQQ:g9FgdvGFUrDxFPles/BpIUt8R9OQ

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks