Overview

overview

7

Static

static

3

465fc53fb7...c4.exe

windows7-x64

7

465fc53fb7...c4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    465fc53fb7406b640565287a6c9b253ec523c4c1ac0e31b7d270b9e1959777c4

  • Size

    1.6MB

  • Sample

    241031-j41trsvbmh

  • MD5

    1606310132423f317a90ee2a01f048e9

  • SHA1

    3a934793eaba1a632fab519a9f58ee2d1d6ebf7e

  • SHA256

    465fc53fb7406b640565287a6c9b253ec523c4c1ac0e31b7d270b9e1959777c4

  • SHA512

    f6e6a8194fb0b6cbefc457db1b1f26461a6d4c8dda4c01b45ef82cf7749cc89a9f6c1978244e15794c59b4b618567994c4f8a27ffec8fa99f4e6c6335ecad9fc

  • SSDEEP

    24576:77jjJRtwhWDEXmJFnJjw8a4HXz9iAQEqAm4Duiw60GFkgDLJrWBvO0yjm0n:777b9D9iiqAHJwFgDLJrwvo

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      465fc53fb7406b640565287a6c9b253ec523c4c1ac0e31b7d270b9e1959777c4

    • Size

      1.6MB

    • MD5

      1606310132423f317a90ee2a01f048e9

    • SHA1

      3a934793eaba1a632fab519a9f58ee2d1d6ebf7e

    • SHA256

      465fc53fb7406b640565287a6c9b253ec523c4c1ac0e31b7d270b9e1959777c4

    • SHA512

      f6e6a8194fb0b6cbefc457db1b1f26461a6d4c8dda4c01b45ef82cf7749cc89a9f6c1978244e15794c59b4b618567994c4f8a27ffec8fa99f4e6c6335ecad9fc

    • SSDEEP

      24576:77jjJRtwhWDEXmJFnJjw8a4HXz9iAQEqAm4Duiw60GFkgDLJrWBvO0yjm0n:777b9D9iiqAHJwFgDLJrwvo

    Score
    7/10
    bootkitdiscoverypersistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks