General

  • Target

    357b0847ef0933671dbb5e30ac6b157ff4a529661c361375b21f1ee775d82532

  • Size

    247KB

  • Sample

    241031-zsvrdatenn

  • MD5

    5d807572ec2c8e0f7195a123a0b2070f

  • SHA1

    0f6bbd6f9b2dad78de9665c5998dae5eabfb8c25

  • SHA256

    357b0847ef0933671dbb5e30ac6b157ff4a529661c361375b21f1ee775d82532

  • SHA512

    155de89ec5494d4852f94f93780cc003becd689f22ad850448dd369388f3da04f267f82ae452d8b55b73bc41ea114fb36514e2cc272874b6a8ff98fc8aa5c60c

  • SSDEEP

    3072:+2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhOn+Te:+0KgGwHqwOOELha+sm2D2+UhngufFI

Malware Config

Targets

    • Target

      357b0847ef0933671dbb5e30ac6b157ff4a529661c361375b21f1ee775d82532

    • Size

      247KB

    • MD5

      5d807572ec2c8e0f7195a123a0b2070f

    • SHA1

      0f6bbd6f9b2dad78de9665c5998dae5eabfb8c25

    • SHA256

      357b0847ef0933671dbb5e30ac6b157ff4a529661c361375b21f1ee775d82532

    • SHA512

      155de89ec5494d4852f94f93780cc003becd689f22ad850448dd369388f3da04f267f82ae452d8b55b73bc41ea114fb36514e2cc272874b6a8ff98fc8aa5c60c

    • SSDEEP

      3072:+2RaiKg4xmUh1WXHqw/l+qmOELhakVsm3mxB32tLEv8zfdn5f2dZLCozOhhOn+Te:+0KgGwHqwOOELha+sm2D2+UhngufFI

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks