Overview

overview

7

Static

static

5

2f5c91c725...8N.exe

windows7-x64

7

2f5c91c725...8N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f5c91c7256f0ca09f01337dbaf853ebf01527b00261e573da13b50f28b3f1a8N

  • Size

    7.4MB

  • Sample

    240928-j1v44sxgjh

  • MD5

    0cc9c6528e8ef9a6f7342af6a34f7e60

  • SHA1

    edcedb98cb5cfac260dbc16bc1961591889bfa0f

  • SHA256

    2f5c91c7256f0ca09f01337dbaf853ebf01527b00261e573da13b50f28b3f1a8

  • SHA512

    71c9f29c2f26653c72794e2636b3aa50b380a25421fe2d9ad034e4f4405defdf8fe5940b1e819c8dad36f9c7d779d19bfc51bc9cf2b26e359f452f9836e887a6

  • SSDEEP

    196608:WwUk/aNCAJfMqq9oDKQaPxF0a1uwZhkrpqT5yn:Kk/aEAJkxiDIPxF0Qkd+U

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      2f5c91c7256f0ca09f01337dbaf853ebf01527b00261e573da13b50f28b3f1a8N

    • Size

      7.4MB

    • MD5

      0cc9c6528e8ef9a6f7342af6a34f7e60

    • SHA1

      edcedb98cb5cfac260dbc16bc1961591889bfa0f

    • SHA256

      2f5c91c7256f0ca09f01337dbaf853ebf01527b00261e573da13b50f28b3f1a8

    • SHA512

      71c9f29c2f26653c72794e2636b3aa50b380a25421fe2d9ad034e4f4405defdf8fe5940b1e819c8dad36f9c7d779d19bfc51bc9cf2b26e359f452f9836e887a6

    • SSDEEP

      196608:WwUk/aNCAJfMqq9oDKQaPxF0a1uwZhkrpqT5yn:Kk/aEAJkxiDIPxF0Qkd+U

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks