Overview

overview

7

Static

static

3

caf064d2c5...f4.dll

windows7-x64

7

caf064d2c5...f4.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    caf064d2c5dfe08be5b3e1ddd80bd97ca1d68a5585376c588e0a851209bfe3f4

  • Size

    4.8MB

  • Sample

    240819-2y17fsvark

  • MD5

    39e3b27a1c051de491e28c969526718e

  • SHA1

    23f117988e79faae3fac17b6c1419033034f46f8

  • SHA256

    caf064d2c5dfe08be5b3e1ddd80bd97ca1d68a5585376c588e0a851209bfe3f4

  • SHA512

    607e2d5588205610c57a92439c22740c98016e31f0e372a8b756cd4ec4f06c8898d096fd992000f5cd28904c75418166f0866e5d8ee4d3f6d4f19e826667f330

  • SSDEEP

    98304:WTIVrAwQigOLBUw8PGcx2HynIiprw0F80XZ5h+u:eEAwX1kx2SnIe845h+u

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      caf064d2c5dfe08be5b3e1ddd80bd97ca1d68a5585376c588e0a851209bfe3f4

    • Size

      4.8MB

    • MD5

      39e3b27a1c051de491e28c969526718e

    • SHA1

      23f117988e79faae3fac17b6c1419033034f46f8

    • SHA256

      caf064d2c5dfe08be5b3e1ddd80bd97ca1d68a5585376c588e0a851209bfe3f4

    • SHA512

      607e2d5588205610c57a92439c22740c98016e31f0e372a8b756cd4ec4f06c8898d096fd992000f5cd28904c75418166f0866e5d8ee4d3f6d4f19e826667f330

    • SSDEEP

      98304:WTIVrAwQigOLBUw8PGcx2HynIiprw0F80XZ5h+u:eEAwX1kx2SnIe845h+u

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks