Overview

overview

8

Static

static

3

1e167c7517...0N.exe

windows7-x64

8

1e167c7517...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e167c7517f7c4ca93b54c73bc0ed190N

  • Size

    4.5MB

  • Sample

    240908-1h99raygqd

  • MD5

    1e167c7517f7c4ca93b54c73bc0ed190

  • SHA1

    a60068f0a087623928620f7f6a7b549aa013d9b6

  • SHA256

    c162d9aee85de5cacc273584bcfb4d8d0eac5eef1fc19e8473f924503e77407c

  • SHA512

    a219196fc782859f19ae28476fbc39cc0c26932853678ab78d908f32334753e20935cd9aeb91b20ae8f8335d3e09d747b27dbcbd9dca7fe7044a7459c3153580

  • SSDEEP

    98304:bWqq+Mb+FyWv5rIy5YFWAvwznJ5wkroFYY/YfthXBxfZr7TQxnTmnw:bWaAWvpIy5YPvwznWFTk/3BrgJTmw

Score
8/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target

      1e167c7517f7c4ca93b54c73bc0ed190N

    • Size

      4.5MB

    • MD5

      1e167c7517f7c4ca93b54c73bc0ed190

    • SHA1

      a60068f0a087623928620f7f6a7b549aa013d9b6

    • SHA256

      c162d9aee85de5cacc273584bcfb4d8d0eac5eef1fc19e8473f924503e77407c

    • SHA512

      a219196fc782859f19ae28476fbc39cc0c26932853678ab78d908f32334753e20935cd9aeb91b20ae8f8335d3e09d747b27dbcbd9dca7fe7044a7459c3153580

    • SSDEEP

      98304:bWqq+Mb+FyWv5rIy5YFWAvwznJ5wkroFYY/YfthXBxfZr7TQxnTmnw:bWaAWvpIy5YPvwznWFTk/3BrgJTmw

    Score
    8/10
    bootkitdiscoveryevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks