General
-
Target
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe
-
Size
188KB
-
Sample
241109-ddwt8sylgr
-
MD5
31ad72b19e3a6b9d23e207c938e0641a
-
SHA1
f001891f22f54a48b025a54d3eeebd92d5efd0ed
-
SHA256
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe
-
SHA512
99e11ece650aa45fdc41292752048a69f002f8cbb5b119d4cc6c4f2f2bea6152ce29ce297d432ae52861684008710ce980875cb43917ae8e9a61b85c66bb6ddc
-
SSDEEP
3072:Cri0+utSCXQJdqByftkViecNemfh0N5Wlu/gX6ASMqsCAn+/B87CVKrNyGTb+:CyrJdqByftkVbgQen+p7obTb+
Static task
static1
Behavioral task
behavioral1
Sample
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe.dll
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe
-
Size
188KB
-
MD5
31ad72b19e3a6b9d23e207c938e0641a
-
SHA1
f001891f22f54a48b025a54d3eeebd92d5efd0ed
-
SHA256
b861b9dfb02d48e66efcc2fe31315f6fcf5e8a13c66efe5d32c892ba634a24fe
-
SHA512
99e11ece650aa45fdc41292752048a69f002f8cbb5b119d4cc6c4f2f2bea6152ce29ce297d432ae52861684008710ce980875cb43917ae8e9a61b85c66bb6ddc
-
SSDEEP
3072:Cri0+utSCXQJdqByftkViecNemfh0N5Wlu/gX6ASMqsCAn+/B87CVKrNyGTb+:CyrJdqByftkVbgQen+p7obTb+
Score8/10-
Blocklisted process makes network request
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1