Overview

overview

6

Static

static

3

2deb63ce4a...dN.exe

windows7-x64

6

2deb63ce4a...dN.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    2deb63ce4a026c061806e3cb7212da989ea9cdcd156d4271176b03c3df2fd53dN

  • Size

    256KB

  • Sample

    241001-w3rkxstgpp

  • MD5

    f7efd6bf47e64193380e8ef9ac5fe470

  • SHA1

    ba3397bb53edf544081411d043bdfa7cb7b67d55

  • SHA256

    2deb63ce4a026c061806e3cb7212da989ea9cdcd156d4271176b03c3df2fd53d

  • SHA512

    a0646314e85d303b63e66ed6b352b8ae724b98db81064c358e7a0dce1529efa531e94001249c1f53f6c96b6a247f0ab88fed4d131cd5226d4b9702d6241c3db5

  • SSDEEP

    6144:qnFuO548Ulgt7qM+3RJnVh05JSCvIbBTq/T6WT2JpKv2m282i+QEr:EUGl3+37VyLmg/TX6mWi9e

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      2deb63ce4a026c061806e3cb7212da989ea9cdcd156d4271176b03c3df2fd53dN

    • Size

      256KB

    • MD5

      f7efd6bf47e64193380e8ef9ac5fe470

    • SHA1

      ba3397bb53edf544081411d043bdfa7cb7b67d55

    • SHA256

      2deb63ce4a026c061806e3cb7212da989ea9cdcd156d4271176b03c3df2fd53d

    • SHA512

      a0646314e85d303b63e66ed6b352b8ae724b98db81064c358e7a0dce1529efa531e94001249c1f53f6c96b6a247f0ab88fed4d131cd5226d4b9702d6241c3db5

    • SSDEEP

      6144:qnFuO548Ulgt7qM+3RJnVh05JSCvIbBTq/T6WT2JpKv2m282i+QEr:EUGl3+37VyLmg/TX6mWi9e

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks