Overview

overview

6

Static

static

3

64e1801eee...4d.exe

windows7-x64

6

64e1801eee...4d.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d

  • Size

    3.9MB

  • Sample

    241010-cpdx5avdje

  • MD5

    fdb738d0e670947b4be64440faf891de

  • SHA1

    8d167df4a9c609b4b93ce7e7fdaa021d1aba819a

  • SHA256

    64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d

  • SHA512

    e5887a66c7e0525e4faf200dd17e151e274702966d0fd3c8a7d836622ec30e5a0ca5fb6a331515cd0feffc7df9748531ded2a6381f5f0b1b084d85752aac9e13

  • SSDEEP

    98304:z8U4zmjdvAbRFPjlGqLO9Bcj9agVmpXDwgE7nQhP6KbiRCq0:szmjdvAbTlGqZjfxdhW

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d

    • Size

      3.9MB

    • MD5

      fdb738d0e670947b4be64440faf891de

    • SHA1

      8d167df4a9c609b4b93ce7e7fdaa021d1aba819a

    • SHA256

      64e1801eee1a2a9ffa9b937229fa47970dc90ff394e87fcc0256fb850601d54d

    • SHA512

      e5887a66c7e0525e4faf200dd17e151e274702966d0fd3c8a7d836622ec30e5a0ca5fb6a331515cd0feffc7df9748531ded2a6381f5f0b1b084d85752aac9e13

    • SSDEEP

      98304:z8U4zmjdvAbRFPjlGqLO9Bcj9agVmpXDwgE7nQhP6KbiRCq0:szmjdvAbTlGqZjfxdhW

    Score
    6/10
    bootkitdiscoverypersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks