Overview

overview

8

Static

static

3

2024-08-08...er.exe

windows7-x64

8

2024-08-08...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-08-08_3ad48441dde3b248898fdde0510967b8_avoslocker

  • Size

    4.3MB

  • Sample

    240808-a568ha1blb

  • MD5

    3ad48441dde3b248898fdde0510967b8

  • SHA1

    607ae333a6be3ebd74c66b894b2068463601f19f

  • SHA256

    23cbddb165bbee7550967a56f3830130999dc784d023b18694371ca5b2278fe6

  • SHA512

    eeb47047b65526fc401c273693311b3bd173ef3244387cad952e715def48b3c79eabac1d3923dfd174b419a4f304a04c60b0e3524b6bb5de0a711fae1915e3a1

  • SSDEEP

    98304:/pq/d8kCBolMyQjujDW9tBcg2jGqwwAqWFnhGJ98j02rSYC6dkB3tiXF:QcX5ujyp8jGqwwtanagrRC6ONtmF

Score
8/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      2024-08-08_3ad48441dde3b248898fdde0510967b8_avoslocker

    • Size

      4.3MB

    • MD5

      3ad48441dde3b248898fdde0510967b8

    • SHA1

      607ae333a6be3ebd74c66b894b2068463601f19f

    • SHA256

      23cbddb165bbee7550967a56f3830130999dc784d023b18694371ca5b2278fe6

    • SHA512

      eeb47047b65526fc401c273693311b3bd173ef3244387cad952e715def48b3c79eabac1d3923dfd174b419a4f304a04c60b0e3524b6bb5de0a711fae1915e3a1

    • SSDEEP

      98304:/pq/d8kCBolMyQjujDW9tBcg2jGqwwAqWFnhGJ98j02rSYC6dkB3tiXF:QcX5ujyp8jGqwwtanagrRC6ONtmF

    Score
    8/10
    bootkitdiscoveryevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks