Overview

overview

7

Static

static

3

310ab74df6...0N.exe

windows7-x64

7

310ab74df6...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    310ab74df664c87a8a9a30e005d842d0N.exe

  • Size

    4.7MB

  • Sample

    240906-1wpvzazgkc

  • MD5

    310ab74df664c87a8a9a30e005d842d0

  • SHA1

    1b64d8b9384752e31e4089471b48f186aa7c52b0

  • SHA256

    300e11353b17644b5cd6f79d6577aeacb1fb427755667107262a380465bb15f5

  • SHA512

    20757b0edd8d14dae38f9e0e374312c00ee26dae9d1d6416186e7e23a5f8170219edba1527b489027d8d42cacbac5a44ddfb5a51a1fb28c11b3b2a9e077c6641

  • SSDEEP

    98304:TtJRVUec2HUbZ1cRS6YZhDgWehJ0xTQJ0d6KIs17QAsTtwvXeq9wwOGaw:TtRUp2H8Z1cRa2WehJ0x0J865sRQAsTK

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      310ab74df664c87a8a9a30e005d842d0N.exe

    • Size

      4.7MB

    • MD5

      310ab74df664c87a8a9a30e005d842d0

    • SHA1

      1b64d8b9384752e31e4089471b48f186aa7c52b0

    • SHA256

      300e11353b17644b5cd6f79d6577aeacb1fb427755667107262a380465bb15f5

    • SHA512

      20757b0edd8d14dae38f9e0e374312c00ee26dae9d1d6416186e7e23a5f8170219edba1527b489027d8d42cacbac5a44ddfb5a51a1fb28c11b3b2a9e077c6641

    • SSDEEP

      98304:TtJRVUec2HUbZ1cRS6YZhDgWehJ0xTQJ0d6KIs17QAsTtwvXeq9wwOGaw:TtRUp2H8Z1cRa2WehJ0x0J865sRQAsTK

    Score
    7/10
    bootkitpersistence

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks