General

  • Target

    9d2cafbe46bd7245f8a0cb66851cd3a4a94b254cee0ac78dc0ff165328387521

  • Size

    2.3MB

  • Sample

    241031-26yrasspf1

  • MD5

    d694887a2736e63564f97e3414241a29

  • SHA1

    f3636ddcd493fea4feafff03571f5e88ec8054eb

  • SHA256

    9d2cafbe46bd7245f8a0cb66851cd3a4a94b254cee0ac78dc0ff165328387521

  • SHA512

    abbe77fbfca32676913d745ece4f059559849955897ebce937732561469bb7ed411acaaf0a1307c83c772d558b956462e16628ddfbf2bb6ee5a13a3ce5769ccc

  • SSDEEP

    49152:h9895d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:h9IvesuDRna5JPYGy7bMpL

Malware Config

Targets

    • Target

      9d2cafbe46bd7245f8a0cb66851cd3a4a94b254cee0ac78dc0ff165328387521

    • Size

      2.3MB

    • MD5

      d694887a2736e63564f97e3414241a29

    • SHA1

      f3636ddcd493fea4feafff03571f5e88ec8054eb

    • SHA256

      9d2cafbe46bd7245f8a0cb66851cd3a4a94b254cee0ac78dc0ff165328387521

    • SHA512

      abbe77fbfca32676913d745ece4f059559849955897ebce937732561469bb7ed411acaaf0a1307c83c772d558b956462e16628ddfbf2bb6ee5a13a3ce5769ccc

    • SSDEEP

      49152:h9895d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:h9IvesuDRna5JPYGy7bMpL

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks