Overview

overview

10

Static

static

3

SOCIAL CRE...ST.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SOCIAL CREDIT TEST.exe

  • Size

    19.7MB

  • Sample

    240810-t8besascjh

  • MD5

    80c506da3df5e4580c06c48162bccbea

  • SHA1

    43fbccf50f91cd8e1190869b0edc96d920519c14

  • SHA256

    5699b2e12f78b7eeca0633c6a5a93effe7187565eccd7668acccf93c61ab7acb

  • SHA512

    f4a424bf758bb48da944701397ac1e82bb72a15ea4e8818535f2e52199d37e9caf4361303fee4bd9d6db528e1c0171d1612aebc5f636ca9c4ee4fd795432b8c5

  • SSDEEP

    393216:AZwsO1LNrFRdcQ87fxa3JxLCQi2LXe+FRdcQ87fxa3JmZRNIcgi:8O1xrFRdT8zaJp9Py+FRdT8zaJUaDi

Score
10/10
bootkitevasionpersistencetrojan

Malware Config

Targets

    • Target

      SOCIAL CREDIT TEST.exe

    • Size

      19.7MB

    • MD5

      80c506da3df5e4580c06c48162bccbea

    • SHA1

      43fbccf50f91cd8e1190869b0edc96d920519c14

    • SHA256

      5699b2e12f78b7eeca0633c6a5a93effe7187565eccd7668acccf93c61ab7acb

    • SHA512

      f4a424bf758bb48da944701397ac1e82bb72a15ea4e8818535f2e52199d37e9caf4361303fee4bd9d6db528e1c0171d1612aebc5f636ca9c4ee4fd795432b8c5

    • SSDEEP

      393216:AZwsO1LNrFRdcQ87fxa3JxLCQi2LXe+FRdcQ87fxa3JmZRNIcgi:8O1xrFRdT8zaJp9Py+FRdT8zaJUaDi

    Score
    10/10
    bootkitevasionpersistencetrojan

    • UAC bypass

      evasiontrojan

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks