General

  • Target

    »¯µû.exe

  • Size

    5.1MB

  • Sample

    240612-tk7s3s1crc

  • MD5

    d3bb689fb106975f52bc05f160b602f3

  • SHA1

    dad764bd84e2a15be8d3caa2c19d805d37af218f

  • SHA256

    a7279d166b55e281715a18c6de0796462bfc741553694a094e97ca86bdff32e7

  • SHA512

    99cebb0f5a7eaf384a9d4052393d808960e1d18a84d738b117d76e71b01e2c15fd0db8cc9187af6e00f9da6384949c25bd25bd8454d07efdce4da58755d19b50

  • SSDEEP

    98304:wtoIBZeFM/lTlsm4yTQw7phY2V79trOddM+dic/2+npJpDzPq+kcF0hC7HfSBCai:whvVYQ37Sdd9iD+nt3Pq+kcF0SfSi

Malware Config

Targets

    • Target

      »¯µû.exe

    • Size

      5.1MB

    • MD5

      d3bb689fb106975f52bc05f160b602f3

    • SHA1

      dad764bd84e2a15be8d3caa2c19d805d37af218f

    • SHA256

      a7279d166b55e281715a18c6de0796462bfc741553694a094e97ca86bdff32e7

    • SHA512

      99cebb0f5a7eaf384a9d4052393d808960e1d18a84d738b117d76e71b01e2c15fd0db8cc9187af6e00f9da6384949c25bd25bd8454d07efdce4da58755d19b50

    • SSDEEP

      98304:wtoIBZeFM/lTlsm4yTQw7phY2V79trOddM+dic/2+npJpDzPq+kcF0hC7HfSBCai:whvVYQ37Sdd9iD+nt3Pq+kcF0SfSi

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Tasks