Overview

overview

8

Static

static

3

2024-08-14...er.exe

windows7-x64

8

2024-08-14...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-14_3a0210e71c977665b6c440cf152e6ff3_avoslocker

  • Size

    4.3MB

  • Sample

    240814-atx6fsxejl

  • MD5

    3a0210e71c977665b6c440cf152e6ff3

  • SHA1

    47c7873b5f1dfb3ac11dce68e47992fdf9a9dfdc

  • SHA256

    6f85cd656597aaec9594c87a2ff7ff09cba0c69e8c245d41c4bb38262f75e757

  • SHA512

    5b0458f4b81da3833c65365e77a0fcfcf76a04441df65eb4534a1819544e1b8976ffe83a9d63d2314817abe4f4dc02c7d3c28a02ddc0cfda2072ab544e374333

  • SSDEEP

    98304:zpq/d8kCB2lMyQjujDW9tBcg2jGqwwA85M8Q4i9GUst+5hU8H1mVkB3tiXf:cc15ujyp8jGqwwL5XQ4yGUp5pH1mGNtM

Score
8/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      2024-08-14_3a0210e71c977665b6c440cf152e6ff3_avoslocker

    • Size

      4.3MB

    • MD5

      3a0210e71c977665b6c440cf152e6ff3

    • SHA1

      47c7873b5f1dfb3ac11dce68e47992fdf9a9dfdc

    • SHA256

      6f85cd656597aaec9594c87a2ff7ff09cba0c69e8c245d41c4bb38262f75e757

    • SHA512

      5b0458f4b81da3833c65365e77a0fcfcf76a04441df65eb4534a1819544e1b8976ffe83a9d63d2314817abe4f4dc02c7d3c28a02ddc0cfda2072ab544e374333

    • SSDEEP

      98304:zpq/d8kCB2lMyQjujDW9tBcg2jGqwwA85M8Q4i9GUst+5hU8H1mVkB3tiXf:cc15ujyp8jGqwwL5XQ4yGUp5pH1mGNtM

    Score
    8/10
    bootkitdiscoveryevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks