Overview

overview

6

Static

static

3

5bf2371e60...b4.exe

windows7-x64

1

5bf2371e60...b4.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4

  • Size

    11.9MB

  • Sample

    240526-fmba1age59

  • MD5

    9e8179d7cc3a19b00071f78a9e8bd735

  • SHA1

    c42fbf5f8414758272008ac8f86e1ef3be4c1bdb

  • SHA256

    5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4

  • SHA512

    311772ea09626de8d57caa35c66beb217101358c0a83e573dbe0550db40b8cd0110b8d90c71b11d022f9db3deefe68c331028e305ab895328c054da7bd6d3fc6

  • SSDEEP

    196608:6a2hXvqVBopwshSdluFBAys1kNVEAzUrhVwNCjpUPRt/EV5wvn14Q5Pn5ftaVxBn:6vvcGiASdY59z0sypUPRREVytpPn5fMl

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4

    • Size

      11.9MB

    • MD5

      9e8179d7cc3a19b00071f78a9e8bd735

    • SHA1

      c42fbf5f8414758272008ac8f86e1ef3be4c1bdb

    • SHA256

      5bf2371e6060d92260ca09443dd11d332e18a68c5f2995840ae424874ab090b4

    • SHA512

      311772ea09626de8d57caa35c66beb217101358c0a83e573dbe0550db40b8cd0110b8d90c71b11d022f9db3deefe68c331028e305ab895328c054da7bd6d3fc6

    • SSDEEP

      196608:6a2hXvqVBopwshSdluFBAys1kNVEAzUrhVwNCjpUPRt/EV5wvn14Q5Pn5ftaVxBn:6vvcGiASdY59z0sypUPRREVytpPn5fMl

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks