Overview

overview

7

Static

static

3

26a4078204...56.exe

windows7-x64

7

26a4078204...56.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    26a40782040216e2fc0333e5f287e2f50d3611b0962153fd0a6740c2521d4756

  • Size

    14.9MB

  • Sample

    240526-1tachaec69

  • MD5

    76b2fc40769689455303764527e69aa8

  • SHA1

    688e05dc834fa66dba8ba7d7e19ad52e0eb2d1a2

  • SHA256

    26a40782040216e2fc0333e5f287e2f50d3611b0962153fd0a6740c2521d4756

  • SHA512

    742c3991198693c8b596f42926fd582091ae2a5ca3dc43c08fd9bd2ff73d7b639db4e5e4e75ff427b536d4797ec11dfecf875e47f9f53843b083457b48f0f316

  • SSDEEP

    393216:wgKtWvY83DTZhifTO69l42BO/jJrSF9WjfA:wCZt69W2A/gzWTA

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      26a40782040216e2fc0333e5f287e2f50d3611b0962153fd0a6740c2521d4756

    • Size

      14.9MB

    • MD5

      76b2fc40769689455303764527e69aa8

    • SHA1

      688e05dc834fa66dba8ba7d7e19ad52e0eb2d1a2

    • SHA256

      26a40782040216e2fc0333e5f287e2f50d3611b0962153fd0a6740c2521d4756

    • SHA512

      742c3991198693c8b596f42926fd582091ae2a5ca3dc43c08fd9bd2ff73d7b639db4e5e4e75ff427b536d4797ec11dfecf875e47f9f53843b083457b48f0f316

    • SSDEEP

      393216:wgKtWvY83DTZhifTO69l42BO/jJrSF9WjfA:wCZt69W2A/gzWTA

    Score
    7/10
    bootkitpersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks