General

  • Target

    4b38f3eea2e3423b1291bb16b199a64deec4695f27f87bc192ea46342cb283ec

  • Size

    247KB

  • Sample

    241031-wktmkazpbt

  • MD5

    af8091077524516f09466c58072f96f4

  • SHA1

    11521b50c5ebd27593f969c1000aedd163dc02c8

  • SHA256

    4b38f3eea2e3423b1291bb16b199a64deec4695f27f87bc192ea46342cb283ec

  • SHA512

    ee5cdacf6016a27b9472720a5dbb48d79f18f6560c400c3ac95162fefd2bf571db88c550221a5f102562100cf2e8309fddec8b8e5fa49e898cceff74c4b40275

  • SSDEEP

    3072:z2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhOn+TN:z0KgGwHqwOOELha+sm2D2+Uhnguf/1

Malware Config

Targets

    • Target

      4b38f3eea2e3423b1291bb16b199a64deec4695f27f87bc192ea46342cb283ec

    • Size

      247KB

    • MD5

      af8091077524516f09466c58072f96f4

    • SHA1

      11521b50c5ebd27593f969c1000aedd163dc02c8

    • SHA256

      4b38f3eea2e3423b1291bb16b199a64deec4695f27f87bc192ea46342cb283ec

    • SHA512

      ee5cdacf6016a27b9472720a5dbb48d79f18f6560c400c3ac95162fefd2bf571db88c550221a5f102562100cf2e8309fddec8b8e5fa49e898cceff74c4b40275

    • SSDEEP

      3072:z2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhOn+TN:z0KgGwHqwOOELha+sm2D2+Uhnguf/1

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks