Overview

overview

7

Static

static

3

6a9078458d...92.exe

windows7-x64

7

6a9078458d...92.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6a9078458da1d6a0650bbb27290bb007735aa92b2371219ce96fdf87ec038a92

  • Size

    10.0MB

  • Sample

    240908-z6aclawbkk

  • MD5

    429340bd2aeb0fab2bd67b2e8fd6336c

  • SHA1

    564f2f22d3021a888d5e3c1e15e5081a69f3108c

  • SHA256

    6a9078458da1d6a0650bbb27290bb007735aa92b2371219ce96fdf87ec038a92

  • SHA512

    306d8c73f1f821ff2469aabd01e4a861e7b0ce2cb0004cd01439146d1ae8e95cbb4d63410bb42ee4847e830de00044e6cddf014b8f42761b4e7d96373043e5cb

  • SSDEEP

    196608:bK4SCb6i+pcH/XEm/s+2jpwimRw7ijQhGjWVQQfuSgMDMT/vtzRPAFRO6yEdZ:bXfXEm/s+2jpwimRw7ijQhGjWVQQfuSd

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      6a9078458da1d6a0650bbb27290bb007735aa92b2371219ce96fdf87ec038a92

    • Size

      10.0MB

    • MD5

      429340bd2aeb0fab2bd67b2e8fd6336c

    • SHA1

      564f2f22d3021a888d5e3c1e15e5081a69f3108c

    • SHA256

      6a9078458da1d6a0650bbb27290bb007735aa92b2371219ce96fdf87ec038a92

    • SHA512

      306d8c73f1f821ff2469aabd01e4a861e7b0ce2cb0004cd01439146d1ae8e95cbb4d63410bb42ee4847e830de00044e6cddf014b8f42761b4e7d96373043e5cb

    • SSDEEP

      196608:bK4SCb6i+pcH/XEm/s+2jpwimRw7ijQhGjWVQQfuSgMDMT/vtzRPAFRO6yEdZ:bXfXEm/s+2jpwimRw7ijQhGjWVQQfuSd

    Score
    7/10
    bootkitdiscoverypersistence

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks