General
-
Target
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633
-
Size
11.0MB
-
Sample
240526-p4e5yseb8v
-
MD5
7eae7beacdbedc4a20e753e9b661a472
-
SHA1
f27b9ba498a43959733a654e73502485970e2aea
-
SHA256
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633
-
SHA512
9a73742980786cca50096d811686cd9ce5f799a4bc7b10c5953e1d13d52ed0df57cbfc56d0dce5a4de0d578cac59201b9981b47283f63127ca78196d76544e3c
-
SSDEEP
196608:WdBlXFJJViZABzvzeMNcDW4TumyuxF2qG2/2ThLMQgG:WBlLyZazeMcDW0z2qG2/2FQQ
Behavioral task
behavioral1
Sample
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633
-
Size
11.0MB
-
MD5
7eae7beacdbedc4a20e753e9b661a472
-
SHA1
f27b9ba498a43959733a654e73502485970e2aea
-
SHA256
ff1dbe82c659e3da8a962f2e9c97d541ee72f1277b62a30de50042cc956a7633
-
SHA512
9a73742980786cca50096d811686cd9ce5f799a4bc7b10c5953e1d13d52ed0df57cbfc56d0dce5a4de0d578cac59201b9981b47283f63127ca78196d76544e3c
-
SSDEEP
196608:WdBlXFJJViZABzvzeMNcDW4TumyuxF2qG2/2ThLMQgG:WBlLyZazeMcDW0z2qG2/2FQQ
Score9/10-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-