General
-
Target
b69c5746836e8e9af15cf474730b0c21fdeaf85f68d8790949d3962a06fa89ad
-
Size
2.4MB
-
Sample
240611-w7aszaxaml
-
MD5
dfc8ba19b44332076fca730e094f58e7
-
SHA1
5465107814cb88293d114f92eaad6e9beb6d63ce
-
SHA256
b69c5746836e8e9af15cf474730b0c21fdeaf85f68d8790949d3962a06fa89ad
-
SHA512
877e2359d5318ef33a8c3db08b36102b5bc5f7864871595ff3c74d229c005d52cff4e43145ee17d1964dbf5667fda65cbde3b0842590425d5f6f1356e7e489dd
-
SSDEEP
49152:+dCCMb0bljXPznMoHc4/g51p7KieVcOxaRjDRORxC:+UK5Pxc4/aKieJIR0C
Static task
static1
Behavioral task
behavioral1
Sample
b69c5746836e8e9af15cf474730b0c21fdeaf85f68d8790949d3962a06fa89ad.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Targets
-
-
Target
b69c5746836e8e9af15cf474730b0c21fdeaf85f68d8790949d3962a06fa89ad
-
Size
2.4MB
-
MD5
dfc8ba19b44332076fca730e094f58e7
-
SHA1
5465107814cb88293d114f92eaad6e9beb6d63ce
-
SHA256
b69c5746836e8e9af15cf474730b0c21fdeaf85f68d8790949d3962a06fa89ad
-
SHA512
877e2359d5318ef33a8c3db08b36102b5bc5f7864871595ff3c74d229c005d52cff4e43145ee17d1964dbf5667fda65cbde3b0842590425d5f6f1356e7e489dd
-
SSDEEP
49152:+dCCMb0bljXPznMoHc4/g51p7KieVcOxaRjDRORxC:+UK5Pxc4/aKieJIR0C
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
6Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Pre-OS Boot
1Bootkit
1