Overview

overview

7

Static

static

3

5ff84971f1...a1.exe

windows7-x64

7

5ff84971f1...a1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ff84971f17e92a760e96c0b2fb72c0cfb4e5adc1fd18f87d07b8e2589a936a1

  • Size

    4.8MB

  • Sample

    240927-lvr7dawgnp

  • MD5

    ae734c23c915b7fea6740391d9bc3664

  • SHA1

    e8ee60f348d29fe6a9473d46ac868f9b7994134f

  • SHA256

    5ff84971f17e92a760e96c0b2fb72c0cfb4e5adc1fd18f87d07b8e2589a936a1

  • SHA512

    7da42faf52f42505c824428ac7378a45881a88cc398918fddda2bdd7c7953ef62ce2ce1278fea80fd6af7d43fcd5eded83b5db656e21ab53d01c2916e609a4fb

  • SSDEEP

    98304:RVeM4VwHuokyfO8PGcx2HynIiprw0F80XZMfjt:XAVw+kx2SnIe84Cjt

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      5ff84971f17e92a760e96c0b2fb72c0cfb4e5adc1fd18f87d07b8e2589a936a1

    • Size

      4.8MB

    • MD5

      ae734c23c915b7fea6740391d9bc3664

    • SHA1

      e8ee60f348d29fe6a9473d46ac868f9b7994134f

    • SHA256

      5ff84971f17e92a760e96c0b2fb72c0cfb4e5adc1fd18f87d07b8e2589a936a1

    • SHA512

      7da42faf52f42505c824428ac7378a45881a88cc398918fddda2bdd7c7953ef62ce2ce1278fea80fd6af7d43fcd5eded83b5db656e21ab53d01c2916e609a4fb

    • SSDEEP

      98304:RVeM4VwHuokyfO8PGcx2HynIiprw0F80XZMfjt:XAVw+kx2SnIe84Cjt

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks