Overview

overview

7

Static

static

3

c476238462...0e.exe

windows7-x64

7

c476238462...0e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c476238462cb7951286baabbd9dc55b5413184cf3445cfbebc4efc4d64a6050e

  • Size

    4.8MB

  • Sample

    240925-sshngswckd

  • MD5

    bc87745f4633387ef32b3444d84e1312

  • SHA1

    4e368e62dc24e715c56dc6f3dd229a92fc125b6a

  • SHA256

    c476238462cb7951286baabbd9dc55b5413184cf3445cfbebc4efc4d64a6050e

  • SHA512

    1127485edff421fb73f17399c02a488c78eb771e4da264229e10a52925c22c327f248db8d83ab16fe64edfac98f3d8596b836001bff89514af3e42ebc95ba4fc

  • SSDEEP

    98304:nXHfZysNkdeOVWB4PGrx2fEyMmzHJhYlRJa:nPx1dx2f9MmzHwO

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      c476238462cb7951286baabbd9dc55b5413184cf3445cfbebc4efc4d64a6050e

    • Size

      4.8MB

    • MD5

      bc87745f4633387ef32b3444d84e1312

    • SHA1

      4e368e62dc24e715c56dc6f3dd229a92fc125b6a

    • SHA256

      c476238462cb7951286baabbd9dc55b5413184cf3445cfbebc4efc4d64a6050e

    • SHA512

      1127485edff421fb73f17399c02a488c78eb771e4da264229e10a52925c22c327f248db8d83ab16fe64edfac98f3d8596b836001bff89514af3e42ebc95ba4fc

    • SSDEEP

      98304:nXHfZysNkdeOVWB4PGrx2fEyMmzHJhYlRJa:nPx1dx2f9MmzHwO

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks