Overview

overview

7

Static

static

3

0fc98e66bb...0a.exe

windows7-x64

7

0fc98e66bb...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0fc98e66bbd78aeeb387df346534de254db03d464973732bf0631f7a894f5a0a

  • Size

    4.8MB

  • Sample

    240919-gtxm9athkc

  • MD5

    944f1594596594e664b443465752e946

  • SHA1

    d0a4e646676dd826e32f9eb9eecabfbc67ccf4c7

  • SHA256

    0fc98e66bbd78aeeb387df346534de254db03d464973732bf0631f7a894f5a0a

  • SHA512

    539110f15e5d657719adc0cfe0ab066a5db7b89237ce34b641700158f1fc80285f74303f8a76210314b6af49056a08fa7573fd73575e7d3deab5f1bdadb072cd

  • SSDEEP

    98304:AVeM4VwHuokyfn8PGcx2HynIiprw0F80XZrL2o:mAVw3kx2SnIe84X2o

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      0fc98e66bbd78aeeb387df346534de254db03d464973732bf0631f7a894f5a0a

    • Size

      4.8MB

    • MD5

      944f1594596594e664b443465752e946

    • SHA1

      d0a4e646676dd826e32f9eb9eecabfbc67ccf4c7

    • SHA256

      0fc98e66bbd78aeeb387df346534de254db03d464973732bf0631f7a894f5a0a

    • SHA512

      539110f15e5d657719adc0cfe0ab066a5db7b89237ce34b641700158f1fc80285f74303f8a76210314b6af49056a08fa7573fd73575e7d3deab5f1bdadb072cd

    • SSDEEP

      98304:AVeM4VwHuokyfn8PGcx2HynIiprw0F80XZrL2o:mAVw3kx2SnIe84X2o

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks