Overview

overview

7

Static

static

1

b02269c6fa...61.exe

windows7-x64

7

b02269c6fa...61.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b02269c6fa8326504123393242c2fff691e7ad7c2172111d0c046ca6a9bdb661

  • Size

    1.6MB

  • Sample

    240611-3jsgfawbnm

  • MD5

    f158384936a9005e88e18ec25e7c0f1e

  • SHA1

    f92881beb843e7eb483bf0027b27376bb29b0f24

  • SHA256

    b02269c6fa8326504123393242c2fff691e7ad7c2172111d0c046ca6a9bdb661

  • SHA512

    068102312e1d3ec41b75bf24032b714ee4ad6661ac690075ad81a36b47d81900abcedc4d85adea2842d8c2b50844c4acd4c06a16d030e506c20c70e58238bfec

  • SSDEEP

    24576:R/lrU/JboM0lOglm2nNPYs/9Wny5gCkIurDsD7eXGzLervxqA9vrEH7M:Fl4/BvOFm2nhL/90yGDsD7SGzLezUS

Score
7/10
bootkitpersistenceupx

Malware Config

Targets

    • Target

      b02269c6fa8326504123393242c2fff691e7ad7c2172111d0c046ca6a9bdb661

    • Size

      1.6MB

    • MD5

      f158384936a9005e88e18ec25e7c0f1e

    • SHA1

      f92881beb843e7eb483bf0027b27376bb29b0f24

    • SHA256

      b02269c6fa8326504123393242c2fff691e7ad7c2172111d0c046ca6a9bdb661

    • SHA512

      068102312e1d3ec41b75bf24032b714ee4ad6661ac690075ad81a36b47d81900abcedc4d85adea2842d8c2b50844c4acd4c06a16d030e506c20c70e58238bfec

    • SSDEEP

      24576:R/lrU/JboM0lOglm2nNPYs/9Wny5gCkIurDsD7eXGzLervxqA9vrEH7M:Fl4/BvOFm2nhL/90yGDsD7SGzLezUS

    Score
    7/10
    bootkitpersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks