Overview

overview

7

Static

static

7

ac04a48852...f0.exe

windows7-x64

7

ac04a48852...f0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac04a48852d30d47ba67e250639819f703ff2a2367f349d2691ad1ae2bb814f0

  • Size

    2.0MB

  • Sample

    240526-hm4zesbd98

  • MD5

    9336d94530a361887d032c551a14af67

  • SHA1

    0ff178d71c2212a0fc05984ad780dcb76f6ffb88

  • SHA256

    ac04a48852d30d47ba67e250639819f703ff2a2367f349d2691ad1ae2bb814f0

  • SHA512

    c643d7f22a427ec0af6d90c33e8e42cbe199acfea0ef5d0b2d464526ea4c3c851cc8e35b4bb455585a65c14078841290f29404d0c15db5b94ee56836bd3a923e

  • SSDEEP

    49152:J6vFkG6KQisUIlEW46DHimMTIf5zpms5H6XiDU4NF6mzvWcDvCifcebHVkweTaeO:I+fSlkJ46DHiif5Fms5aXiDU4N2cDvCG

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      ac04a48852d30d47ba67e250639819f703ff2a2367f349d2691ad1ae2bb814f0

    • Size

      2.0MB

    • MD5

      9336d94530a361887d032c551a14af67

    • SHA1

      0ff178d71c2212a0fc05984ad780dcb76f6ffb88

    • SHA256

      ac04a48852d30d47ba67e250639819f703ff2a2367f349d2691ad1ae2bb814f0

    • SHA512

      c643d7f22a427ec0af6d90c33e8e42cbe199acfea0ef5d0b2d464526ea4c3c851cc8e35b4bb455585a65c14078841290f29404d0c15db5b94ee56836bd3a923e

    • SSDEEP

      49152:J6vFkG6KQisUIlEW46DHimMTIf5zpms5H6XiDU4NF6mzvWcDvCifcebHVkweTaeO:I+fSlkJ46DHiif5Fms5aXiDU4N2cDvCG

    Score
    7/10
    bootkitpersistenceupx

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks