Overview

overview

7

Static

static

3

00080f608e...0N.exe

windows7-x64

7

00080f608e...0N.exe

windows10-2004-x64

7

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDIR/xID.dll

windows7-x64

3

$PLUGINSDIR/xID.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    00080f608e789213de2c506a2a2ddae0N.exe

  • Size

    75KB

  • Sample

    240805-y2x3es1clc

  • MD5

    00080f608e789213de2c506a2a2ddae0

  • SHA1

    8f59b0d3743d5b9d2a06b5f2b9dae82a90f5e458

  • SHA256

    2436fc18abe95ce13085fdfecc5789bcf7e38d452688ebfb7b310ad0b8663211

  • SHA512

    b2f5c266169e6b3e83ec2866a8555d80ff1cf22d3f7cde3214a1d245df1bff725b17fd8b268f70c4f97c424c91c604a928599f9ea2bc505a85e4961aa242c2d2

  • SSDEEP

    1536:jYTmwVUsW7dtJMHy0DxmJWMH8fm0eGWmgo5D2gZ6RaLZ32:US17XJiDxmJWfmFGWC1ZoEt2

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      00080f608e789213de2c506a2a2ddae0N.exe

    • Size

      75KB

    • MD5

      00080f608e789213de2c506a2a2ddae0

    • SHA1

      8f59b0d3743d5b9d2a06b5f2b9dae82a90f5e458

    • SHA256

      2436fc18abe95ce13085fdfecc5789bcf7e38d452688ebfb7b310ad0b8663211

    • SHA512

      b2f5c266169e6b3e83ec2866a8555d80ff1cf22d3f7cde3214a1d245df1bff725b17fd8b268f70c4f97c424c91c604a928599f9ea2bc505a85e4961aa242c2d2

    • SSDEEP

      1536:jYTmwVUsW7dtJMHy0DxmJWMH8fm0eGWmgo5D2gZ6RaLZ32:US17XJiDxmJWfmFGWC1ZoEt2

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Md5dll.dll

    • Size

      8KB

    • MD5

      a7d710e78711d5ab90e4792763241754

    • SHA1

      f31cecd926c5d497aba163a17b75975ec34beb13

    • SHA256

      9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2

    • SHA512

      f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0

    • SSDEEP

      96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      2a2af69379ed269c61893e8146e18f52

    • SHA1

      03264b45960d3f1fde4b031db47ab7a3f863713d

    • SHA256

      e323b74c36dc52c2a3fbda49d998744cf64cab102f0d72796472ab55d2c784d4

    • SHA512

      49388047397e33f1ed502bd0c5e61b98b33881f794fb52ca229db5b589af9ecb370e9043e2143dcb62cd9d00df6cacc89589734c83f9fda0ceb3f216c0bedeab

    • SSDEEP

      192:i4lsN55M8r67wmsvJI5a299sfoG8I+WhPB3RY+h/G3DNl/qYcVp/122gszA:iysdM80dCI5a2LsQ5IlPNRY00AlAWU

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      82f7926fd7d12e3eb8ed7b5232bcf956

    • SHA1

      6065fc921b742cc86c77ce2533fc1d17359eb45e

    • SHA256

      604b5e75f43ffae8f172018cdd8f136392d9c52ae0c100d27ef537bb2dfb3984

    • SHA512

      b31a63ebbda8f147c32d8336c5ecde8c5261ad5526b01926d7cd74b7a9a1348da56e180e53d20e1e300daca76f9511f24d6e695550b705b7650c239e5b6e76c7

    • SSDEEP

      192:BGO6dJA/ruAFEiUdWWE6hsD4YUdJfbub1a8SgMO:pKAFERdlxhTYUzqZaV

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      8KB

    • MD5

      f42b19bd20c82eabcfe14273499e7664

    • SHA1

      99310fe91a2e2fbe720761b5625e1f83afeee0db

    • SHA256

      c99f30f5e2dfd948b7da2219bc5a0a73836a70e2486272b42c3ca45710b0316a

    • SHA512

      c6867ee68b3099a9b03aba7367ed6e55576f874eccab71fbebbc9c3cb01f20e616615e8080c2a379b7e7da1abe6cd776f862f8c9ad4dce38d2fa79b48fa38e49

    • SSDEEP

      192:Jc5gZmsbMx8dA4I5DpEPznEg0rh392d01:JigZHMxSA4kGzEzrp9

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/xID.dll

    • Size

      3KB

    • MD5

      76d2faad042161f24b6c9c78de3bd265

    • SHA1

      12518e1ba9e96dc202e6c12267650e52f1058664

    • SHA256

      0b31ee64cab09f19e672b3d7f7d11516fe1cd373c2e2861a955b84d054c0507f

    • SHA512

      cea11e232eabf2d525b09cae03e8f8a0b83f92a718f8cf92308d7f31bd4f92ab96c34c1107dbed14517f17ee41a84afd3433f42148edebfbaeca78a517b7e508

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks