Overview

overview

9

Static

static

9

01cc8a71ed...c8.exe

windows7-x64

9

01cc8a71ed...c8.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01cc8a71ed1c696b00477e9a6bf1d6fb6dcc13864b818d6853af9506d53436c8

  • Size

    9.6MB

  • Sample

    240526-jlxpdsbf2x

  • MD5

    8e3135a3577147f7038f410cadae91c7

  • SHA1

    682f73393d772f2bfcc148ddf6685bab650dd9b9

  • SHA256

    01cc8a71ed1c696b00477e9a6bf1d6fb6dcc13864b818d6853af9506d53436c8

  • SHA512

    f31842f7bcb4477c80fd1d9cf2d7d91ec482fb213268cbda4626d00f22b549f30fb6e3c5fea149e2e2b9fb0b6eed28a009d2a28850799daa04e598fc0f141459

  • SSDEEP

    196608:qG5rawRJVmwRZ/flX76qu73H8DTa4WyjZ:qGn2wn/BVoH8X8y

Score
9/10
bootkitoss_akpersistenceupx

Malware Config

Targets

    • Target

      01cc8a71ed1c696b00477e9a6bf1d6fb6dcc13864b818d6853af9506d53436c8

    • Size

      9.6MB

    • MD5

      8e3135a3577147f7038f410cadae91c7

    • SHA1

      682f73393d772f2bfcc148ddf6685bab650dd9b9

    • SHA256

      01cc8a71ed1c696b00477e9a6bf1d6fb6dcc13864b818d6853af9506d53436c8

    • SHA512

      f31842f7bcb4477c80fd1d9cf2d7d91ec482fb213268cbda4626d00f22b549f30fb6e3c5fea149e2e2b9fb0b6eed28a009d2a28850799daa04e598fc0f141459

    • SSDEEP

      196608:qG5rawRJVmwRZ/flX76qu73H8DTa4WyjZ:qGn2wn/BVoH8X8y

    Score
    9/10
    bootkitoss_akpersistenceupx

    • detect oss ak

      oss ak information detected.

      oss_ak

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks