Overview

overview

6

Static

static

3

09212eca9e...ab.exe

windows7-x64

6

09212eca9e...ab.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09212eca9e9bf60aa8bcbf456db4adffe1ad66619f2e255703f5acef9083b2ab

  • Size

    3.8MB

  • Sample

    240526-zsgvhsbh7w

  • MD5

    053a7bcd4c3bb393dc26d06515e8ba7c

  • SHA1

    e1b65ddea3ffb70a3e77fa6e25b18ded2cfbc8d8

  • SHA256

    09212eca9e9bf60aa8bcbf456db4adffe1ad66619f2e255703f5acef9083b2ab

  • SHA512

    2309c4739a446aaa0c2bff225a8b4f51c339481475a90253304cbcfc8e505fe2d3fe0a829ef1ee6b3e045793c2a36862fdb557e2b4898c6a71383af8301b145c

  • SSDEEP

    98304:NoTAlyy9ilhGFfNB/IBgOPdfycIELTH6Azz/kawk:Hyy0lhINBFEdfTIEn6AfcG

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      09212eca9e9bf60aa8bcbf456db4adffe1ad66619f2e255703f5acef9083b2ab

    • Size

      3.8MB

    • MD5

      053a7bcd4c3bb393dc26d06515e8ba7c

    • SHA1

      e1b65ddea3ffb70a3e77fa6e25b18ded2cfbc8d8

    • SHA256

      09212eca9e9bf60aa8bcbf456db4adffe1ad66619f2e255703f5acef9083b2ab

    • SHA512

      2309c4739a446aaa0c2bff225a8b4f51c339481475a90253304cbcfc8e505fe2d3fe0a829ef1ee6b3e045793c2a36862fdb557e2b4898c6a71383af8301b145c

    • SSDEEP

      98304:NoTAlyy9ilhGFfNB/IBgOPdfycIELTH6Azz/kawk:Hyy0lhINBFEdfTIEn6AfcG

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks