Overview

overview

10

Static

static

10

407b02401a...4f.exe

windows7-x64

6

407b02401a...4f.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    407b02401a0b3421ff24f066a446a4761f1bd7e7a316ea9416bb3dd830a3c94f

  • Size

    3.6MB

  • Sample

    240526-rxddwsad94

  • MD5

    722149e3b85a55daa0fec78a757c8a90

  • SHA1

    3c9147bb8a5214551c7f4654ff32f992ecf47450

  • SHA256

    407b02401a0b3421ff24f066a446a4761f1bd7e7a316ea9416bb3dd830a3c94f

  • SHA512

    7f6cdf62d4e752d5895470604024bb952a485d10ecacf4fb2431c7a06341c36c461571bd752fd76910246d6bd908447f8ceda44210bfde7f02850b65864c4a46

  • SSDEEP

    49152:nP/X4JxT+/jUROugaa/mxu/+RVgZMjf4r+AQPYAZGYd1iDL2:P/XgxT+T6umRyem+tQAZ71s

Score
10/10
blackmoonbootkitpersistence

Malware Config

Targets

    • Target

      407b02401a0b3421ff24f066a446a4761f1bd7e7a316ea9416bb3dd830a3c94f

    • Size

      3.6MB

    • MD5

      722149e3b85a55daa0fec78a757c8a90

    • SHA1

      3c9147bb8a5214551c7f4654ff32f992ecf47450

    • SHA256

      407b02401a0b3421ff24f066a446a4761f1bd7e7a316ea9416bb3dd830a3c94f

    • SHA512

      7f6cdf62d4e752d5895470604024bb952a485d10ecacf4fb2431c7a06341c36c461571bd752fd76910246d6bd908447f8ceda44210bfde7f02850b65864c4a46

    • SSDEEP

      49152:nP/X4JxT+/jUROugaa/mxu/+RVgZMjf4r+AQPYAZGYd1iDL2:P/XgxT+T6umRyem+tQAZ71s

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks