Overview

overview

7

Static

static

3

9bab2b8fbf...ce.exe

windows7-x64

7

9bab2b8fbf...ce.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9bab2b8fbf182d4e94e64efdad999cb8780e581a6f813ce8e9a3a3b61917f5ce

  • Size

    4.8MB

  • Sample

    240608-d45vtshd28

  • MD5

    01b3202113150a34b4427a594ef88b6c

  • SHA1

    fed0330cfdff6b8ad85f718b286b7d0ca86ee732

  • SHA256

    9bab2b8fbf182d4e94e64efdad999cb8780e581a6f813ce8e9a3a3b61917f5ce

  • SHA512

    56b658265b41af72983cebed06657941fbf1363153ff3139587232756dc73847829c59192920168752fd49a1699dc6f48e6f81db004a7c0f7797b2fbd443d486

  • SSDEEP

    98304:nXHfZysNkdeOVWB4PGrx2fEyMmzHJhYlRJT:nPx1dx2f9MmzHwX

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      9bab2b8fbf182d4e94e64efdad999cb8780e581a6f813ce8e9a3a3b61917f5ce

    • Size

      4.8MB

    • MD5

      01b3202113150a34b4427a594ef88b6c

    • SHA1

      fed0330cfdff6b8ad85f718b286b7d0ca86ee732

    • SHA256

      9bab2b8fbf182d4e94e64efdad999cb8780e581a6f813ce8e9a3a3b61917f5ce

    • SHA512

      56b658265b41af72983cebed06657941fbf1363153ff3139587232756dc73847829c59192920168752fd49a1699dc6f48e6f81db004a7c0f7797b2fbd443d486

    • SSDEEP

      98304:nXHfZysNkdeOVWB4PGrx2fEyMmzHJhYlRJT:nPx1dx2f9MmzHwX

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks