General

  • Target

    047b1b6c9cff394a69b2f1d3326bcad61232f48413a0ccf51fd3b5855a71136d

  • Size

    247KB

  • Sample

    241031-pdnz6swpaz

  • MD5

    617899fa29a781dbc3885a89714ab014

  • SHA1

    a1620d84b0699f0ca261942089a3134d18c35aa3

  • SHA256

    047b1b6c9cff394a69b2f1d3326bcad61232f48413a0ccf51fd3b5855a71136d

  • SHA512

    50eb643c730084bdb7c08192e1876100f75edd0ec82c7d84cc33913f6a6b46b75e946b7c47d0d3e54d63f9927f0a2aebbfff0bcee9f5616645d8a9f2b6eee6a6

  • SSDEEP

    3072:/2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhBn+TR:/0KgGwHqwOOELha+sm2D2+Uhnguy1f

Malware Config

Targets

    • Target

      047b1b6c9cff394a69b2f1d3326bcad61232f48413a0ccf51fd3b5855a71136d

    • Size

      247KB

    • MD5

      617899fa29a781dbc3885a89714ab014

    • SHA1

      a1620d84b0699f0ca261942089a3134d18c35aa3

    • SHA256

      047b1b6c9cff394a69b2f1d3326bcad61232f48413a0ccf51fd3b5855a71136d

    • SHA512

      50eb643c730084bdb7c08192e1876100f75edd0ec82c7d84cc33913f6a6b46b75e946b7c47d0d3e54d63f9927f0a2aebbfff0bcee9f5616645d8a9f2b6eee6a6

    • SSDEEP

      3072:/2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhBn+TR:/0KgGwHqwOOELha+sm2D2+Uhnguy1f

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks