Overview

overview

6

Static

static

3

aba2aeaab5...98.exe

windows7-x64

6

aba2aeaab5...98.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aba2aeaab544d7536f9b35fc39dd4f0e546a385a0e94a37bf9b0bb98019caa98

  • Size

    2.3MB

  • Sample

    240825-3fz24s1fnh

  • MD5

    347493fb63f169a7cb91002cde2e34bf

  • SHA1

    0a546ef058bc9b234a9d8f512cec87ea18280c12

  • SHA256

    aba2aeaab544d7536f9b35fc39dd4f0e546a385a0e94a37bf9b0bb98019caa98

  • SHA512

    dc859a225bec0e1b5aa610ade158a3863b3f497dbaae546dc7e54352786c80a5921b5e797bbbdfc0b8d5e091999cef688033c5fda7051d340ad5bed07af660a3

  • SSDEEP

    49152:EySrGORAQcP4sK2JXaz2iAdo/cNatLbhhZoSdJHcZ2IxzU:5SrLlce2ZazSoENobhhnFTIm

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      aba2aeaab544d7536f9b35fc39dd4f0e546a385a0e94a37bf9b0bb98019caa98

    • Size

      2.3MB

    • MD5

      347493fb63f169a7cb91002cde2e34bf

    • SHA1

      0a546ef058bc9b234a9d8f512cec87ea18280c12

    • SHA256

      aba2aeaab544d7536f9b35fc39dd4f0e546a385a0e94a37bf9b0bb98019caa98

    • SHA512

      dc859a225bec0e1b5aa610ade158a3863b3f497dbaae546dc7e54352786c80a5921b5e797bbbdfc0b8d5e091999cef688033c5fda7051d340ad5bed07af660a3

    • SSDEEP

      49152:EySrGORAQcP4sK2JXaz2iAdo/cNatLbhhZoSdJHcZ2IxzU:5SrLlce2ZazSoENobhhnFTIm

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks