General

  • Target

    b4923cbab0b28bdcbc4cf8ff8a6680afbb025f25f3f86904c32ba59ad19eea90

  • Size

    216KB

  • Sample

    241017-axcc6awaml

  • MD5

    3df8c2521ccc2a565789e21a7efe2a2a

  • SHA1

    b9cdd76a4e650b8b1df9cad6e28af5e902e195eb

  • SHA256

    b4923cbab0b28bdcbc4cf8ff8a6680afbb025f25f3f86904c32ba59ad19eea90

  • SHA512

    e9c5b865d70f1fccf13fab15357c7429f75f4c27aef8253b23f4fbef81caa941e678e5e27b81d843ac5c3a57beeaa7591525b7c1064b279b1591b729d7ab8a1e

  • SSDEEP

    3072:ds9KL2cTu/9QvFaWA8pDhDIYG7BswwubXW3pCFUKH5cDKCMvW2PrRh4xeqLsSzjM:WKacK/WaV8pyYG7CyCCPHPrX4xeqLp4

Malware Config

Targets

    • Target

      b4923cbab0b28bdcbc4cf8ff8a6680afbb025f25f3f86904c32ba59ad19eea90

    • Size

      216KB

    • MD5

      3df8c2521ccc2a565789e21a7efe2a2a

    • SHA1

      b9cdd76a4e650b8b1df9cad6e28af5e902e195eb

    • SHA256

      b4923cbab0b28bdcbc4cf8ff8a6680afbb025f25f3f86904c32ba59ad19eea90

    • SHA512

      e9c5b865d70f1fccf13fab15357c7429f75f4c27aef8253b23f4fbef81caa941e678e5e27b81d843ac5c3a57beeaa7591525b7c1064b279b1591b729d7ab8a1e

    • SSDEEP

      3072:ds9KL2cTu/9QvFaWA8pDhDIYG7BswwubXW3pCFUKH5cDKCMvW2PrRh4xeqLsSzjM:WKacK/WaV8pyYG7CyCCPHPrX4xeqLp4

    • Modifies security service

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks