Overview

overview

8

Static

static

3

2024-09-02...er.exe

windows7-x64

8

2024-09-02...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-09-02_089d89ba68389434aa357a8ba14e67e1_avoslocker

  • Size

    4.6MB

  • Sample

    240902-bhjz5axcjr

  • MD5

    089d89ba68389434aa357a8ba14e67e1

  • SHA1

    368adc864abf3dc2a5e96decbc702742e343e3b8

  • SHA256

    0b4739a256423710208eb61d9a97906a132b8886602ae09efd0c225daa7c201c

  • SHA512

    36b1479e23cb3c8553e27618bd29b370daf2801df519db987583be86f59acd1afff8c9744873838c5946f800c21f4635cd7857514d662ce3e84ecb5915d84773

  • SSDEEP

    98304:5Wqq+Mb+lyWv5rIy5YFWAvwzn6IhTE3mFFkKmIcoRbO462gnw:5WagWvpIy5YPvwzn6Ii3skKm9WOdBw

Score
8/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      2024-09-02_089d89ba68389434aa357a8ba14e67e1_avoslocker

    • Size

      4.6MB

    • MD5

      089d89ba68389434aa357a8ba14e67e1

    • SHA1

      368adc864abf3dc2a5e96decbc702742e343e3b8

    • SHA256

      0b4739a256423710208eb61d9a97906a132b8886602ae09efd0c225daa7c201c

    • SHA512

      36b1479e23cb3c8553e27618bd29b370daf2801df519db987583be86f59acd1afff8c9744873838c5946f800c21f4635cd7857514d662ce3e84ecb5915d84773

    • SSDEEP

      98304:5Wqq+Mb+lyWv5rIy5YFWAvwzn6IhTE3mFFkKmIcoRbO462gnw:5WagWvpIy5YPvwzn6Ii3skKm9WOdBw

    Score
    8/10
    bootkitdiscoveryevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks