Overview

overview

7

Static

static

3

2e4f147c29...ff.exe

windows7-x64

7

2e4f147c29...ff.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2e4f147c2983811224a0518cb9d7b6213d1d52fc4bf61276f5be62c1473880ff

  • Size

    4.8MB

  • Sample

    240925-1qy7fssfrf

  • MD5

    670921580f403b9427300a699373b7ac

  • SHA1

    031a872c4788f9b0ee72251265e7b2a21039d09c

  • SHA256

    2e4f147c2983811224a0518cb9d7b6213d1d52fc4bf61276f5be62c1473880ff

  • SHA512

    11dd599d45f43a75f7656697e4f09b1d714edf50bdbe5771d50846b8104134bf05ddfee58d0122e8a09d89843d9fd15ae14473a6cdf3e9438007b9298c3c133a

  • SSDEEP

    98304:TVeM4VwHuokyfO8PGcx2HynIiprw0F80XZ/KgI:5AVw+kx2SnIe84CgI

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2e4f147c2983811224a0518cb9d7b6213d1d52fc4bf61276f5be62c1473880ff

    • Size

      4.8MB

    • MD5

      670921580f403b9427300a699373b7ac

    • SHA1

      031a872c4788f9b0ee72251265e7b2a21039d09c

    • SHA256

      2e4f147c2983811224a0518cb9d7b6213d1d52fc4bf61276f5be62c1473880ff

    • SHA512

      11dd599d45f43a75f7656697e4f09b1d714edf50bdbe5771d50846b8104134bf05ddfee58d0122e8a09d89843d9fd15ae14473a6cdf3e9438007b9298c3c133a

    • SSDEEP

      98304:TVeM4VwHuokyfO8PGcx2HynIiprw0F80XZ/KgI:5AVw+kx2SnIe84CgI

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks