Overview

overview

8

Static

static

3

64c2dd8d90...87.exe

windows7-x64

8

64c2dd8d90...87.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64c2dd8d909b54d9f739a60630434b0a1cf93a10299f480e4fdd4c0ed65e9e87

  • Size

    219KB

  • Sample

    240612-gpgq8sseja

  • MD5

    6d48176c8b6ec223f55ff04f9d87f6ff

  • SHA1

    0938dd3cc9691b808421eef3746e2d3f06935a50

  • SHA256

    64c2dd8d909b54d9f739a60630434b0a1cf93a10299f480e4fdd4c0ed65e9e87

  • SHA512

    24ec6f277a8d6a41d5419e2005565df5fa2751a6330d2614c5ac43e3f8d29015f82d0b6854633d280880f407141ade88fee00233c8efa585d65617b2649ca9d3

  • SSDEEP

    3072:32RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhh9K0Kj:30KgGwHqwOOELha+sm2D2+UhngNHK4J0

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      64c2dd8d909b54d9f739a60630434b0a1cf93a10299f480e4fdd4c0ed65e9e87

    • Size

      219KB

    • MD5

      6d48176c8b6ec223f55ff04f9d87f6ff

    • SHA1

      0938dd3cc9691b808421eef3746e2d3f06935a50

    • SHA256

      64c2dd8d909b54d9f739a60630434b0a1cf93a10299f480e4fdd4c0ed65e9e87

    • SHA512

      24ec6f277a8d6a41d5419e2005565df5fa2751a6330d2614c5ac43e3f8d29015f82d0b6854633d280880f407141ade88fee00233c8efa585d65617b2649ca9d3

    • SSDEEP

      3072:32RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhh9K0Kj:30KgGwHqwOOELha+sm2D2+UhngNHK4J0

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks