Overview

overview

8

Static

static

3

342cc45762...1a.exe

windows7-x64

6

342cc45762...1a.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    342cc457626afaa4b4e64d611e16fbb74b3128656061e79b73cd042d16adce1a

  • Size

    219KB

  • Sample

    240612-nqxx6swhlq

  • MD5

    bc327ae378d0e92f5da8e6e404b0b3ac

  • SHA1

    7ccf7eb64597bc6662c9ff066ef16e03c6914cab

  • SHA256

    342cc457626afaa4b4e64d611e16fbb74b3128656061e79b73cd042d16adce1a

  • SHA512

    085b8cef473a0b00e207cb59cbefbb7a99cf0fb76a84604c8fea0b1df16445877df818ac0adc50b0ddbc5713f585bdaa8b5213de1425aaadf9a2d7862f34d067

  • SSDEEP

    3072:w2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhh9K0Ks:w0KgGwHqwOOELha+sm2D2+UhngNHK4M0

Score
8/10
bootkitpersistence

Malware Config

Targets

    • Target

      342cc457626afaa4b4e64d611e16fbb74b3128656061e79b73cd042d16adce1a

    • Size

      219KB

    • MD5

      bc327ae378d0e92f5da8e6e404b0b3ac

    • SHA1

      7ccf7eb64597bc6662c9ff066ef16e03c6914cab

    • SHA256

      342cc457626afaa4b4e64d611e16fbb74b3128656061e79b73cd042d16adce1a

    • SHA512

      085b8cef473a0b00e207cb59cbefbb7a99cf0fb76a84604c8fea0b1df16445877df818ac0adc50b0ddbc5713f585bdaa8b5213de1425aaadf9a2d7862f34d067

    • SSDEEP

      3072:w2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCoKOhh9K0Ks:w0KgGwHqwOOELha+sm2D2+UhngNHK4M0

    Score
    8/10
    bootkitpersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks