Overview

overview

10

Static

static

3

4360a2092a...9N.exe

windows7-x64

10

4360a2092a...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4360a2092acd1ac59d8ef810bf7f487547732fdbfb2e82f64b35411b4ab45339N

  • Size

    220KB

  • Sample

    240920-14jc6a1ejm

  • MD5

    e700d0d7c9bcc8baf58e33747b0df4b0

  • SHA1

    7e411f52a65e4cd92599ff86750b55a57e285724

  • SHA256

    4360a2092acd1ac59d8ef810bf7f487547732fdbfb2e82f64b35411b4ab45339

  • SHA512

    6c954ef6c161cfd189bee3c50d04b723c420b2970aa4939e56201d73f53049a17d3644799b575c00ae0799026422f8afbf521856ffcd305d5364034164dd10bc

  • SSDEEP

    3072:iNu9h3eiLZT2UTOyU2qTq/yecrqyEIlyny4iio1t1oBM9/AC99kLNh11GJ+UEtEj:lh3eeTXFUnq/yesLEoynn7BMJSXtt34

Score
10/10
bootkitdiscoveryevasionpersistence

Malware Config

Targets

    • Target

      4360a2092acd1ac59d8ef810bf7f487547732fdbfb2e82f64b35411b4ab45339N

    • Size

      220KB

    • MD5

      e700d0d7c9bcc8baf58e33747b0df4b0

    • SHA1

      7e411f52a65e4cd92599ff86750b55a57e285724

    • SHA256

      4360a2092acd1ac59d8ef810bf7f487547732fdbfb2e82f64b35411b4ab45339

    • SHA512

      6c954ef6c161cfd189bee3c50d04b723c420b2970aa4939e56201d73f53049a17d3644799b575c00ae0799026422f8afbf521856ffcd305d5364034164dd10bc

    • SSDEEP

      3072:iNu9h3eiLZT2UTOyU2qTq/yecrqyEIlyny4iio1t1oBM9/AC99kLNh11GJ+UEtEj:lh3eeTXFUnq/yesLEoynn7BMJSXtt34

    Score
    10/10
    bootkitdiscoveryevasionpersistence

    • Modifies security service

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks