Overview

overview

7

Static

static

3

3ddfd9c2b6...69.exe

windows7-x64

7

3ddfd9c2b6...69.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ddfd9c2b6610bc1361fb8adb8f000cdc7d9f0afa3dedc5dd4cfe13abeb3e269

  • Size

    7.0MB

  • Sample

    240901-jywymavhmn

  • MD5

    6a1987809076b6b3a1555317b34fee46

  • SHA1

    268092ab9729e9386531c5635702b96ffca4f04e

  • SHA256

    3ddfd9c2b6610bc1361fb8adb8f000cdc7d9f0afa3dedc5dd4cfe13abeb3e269

  • SHA512

    d9585d4b6fc4caccbf657bbdfc34f1cf1fa716d48ef365c6d9e13857593de3348170855f5ae58d29bbc2b811f0aab3698ce25769d9b4ad7dae4ad800636bd742

  • SSDEEP

    196608:ALHHYThPmsk3OtKtYKi8lxQDOE4OP2eeiJVb:NTFc3//dWOE4M2XiL

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      3ddfd9c2b6610bc1361fb8adb8f000cdc7d9f0afa3dedc5dd4cfe13abeb3e269

    • Size

      7.0MB

    • MD5

      6a1987809076b6b3a1555317b34fee46

    • SHA1

      268092ab9729e9386531c5635702b96ffca4f04e

    • SHA256

      3ddfd9c2b6610bc1361fb8adb8f000cdc7d9f0afa3dedc5dd4cfe13abeb3e269

    • SHA512

      d9585d4b6fc4caccbf657bbdfc34f1cf1fa716d48ef365c6d9e13857593de3348170855f5ae58d29bbc2b811f0aab3698ce25769d9b4ad7dae4ad800636bd742

    • SSDEEP

      196608:ALHHYThPmsk3OtKtYKi8lxQDOE4OP2eeiJVb:NTFc3//dWOE4M2XiL

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks