General
-
Target
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4
-
Size
8.7MB
-
Sample
240526-d8ffqsde6z
-
MD5
9dd0d615796004118c7f1afa4c93381e
-
SHA1
9753fa15e1d1b950136101c35508ab040b5df982
-
SHA256
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4
-
SHA512
f51174e7937db579986485598b3193e2d7876c101fce43640f537318a076db75bf744cc22e7be0debfad73e2aee1bc66f9d3793116202d4a5010b4cc40500b1d
-
SSDEEP
196608:EY+akdrS3zGRssZ2K/S/2Y5LIiqGUKNKy8:E7V5gzY1//EFKy
Static task
static1
Behavioral task
behavioral1
Sample
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4
-
Size
8.7MB
-
MD5
9dd0d615796004118c7f1afa4c93381e
-
SHA1
9753fa15e1d1b950136101c35508ab040b5df982
-
SHA256
5fbf26d30c431c9f15a0afaf9dcd2c6996215066f85a6742d7ff3a7646a61bb4
-
SHA512
f51174e7937db579986485598b3193e2d7876c101fce43640f537318a076db75bf744cc22e7be0debfad73e2aee1bc66f9d3793116202d4a5010b4cc40500b1d
-
SSDEEP
196608:EY+akdrS3zGRssZ2K/S/2Y5LIiqGUKNKy8:E7V5gzY1//EFKy
Score6/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-