Overview

overview

7

Static

static

3

64e055d6b7...2d.exe

windows7-x64

7

64e055d6b7...2d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64e055d6b71f186e6fd3f70f85cd0ce036a22c0e86f7e5e2a1c0b75ac999382d

  • Size

    3.8MB

  • Sample

    241119-qfc65awmaw

  • MD5

    c494e0bd40fe7164c0cf6e6c0ab48186

  • SHA1

    a03043064d7f95a678e11f600550f4fa127bd07a

  • SHA256

    64e055d6b71f186e6fd3f70f85cd0ce036a22c0e86f7e5e2a1c0b75ac999382d

  • SHA512

    b3ae43aa81da5a927d5382ee344d091a4e739b36d327bf7654bb8bc649fdc5eb52f097d8287746c724527fde3b874a3ed34f24118bdc564065ec81e08118ee9e

  • SSDEEP

    49152:0sNwoFRoyw9Yxq8A5CVzPIygMuSGOp09B/pwJrN6GFVfoPpNf9CXmYnMBR/Gli:bNwoFWyFGCTgBVPG5o28N1bYnMBN

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      64e055d6b71f186e6fd3f70f85cd0ce036a22c0e86f7e5e2a1c0b75ac999382d

    • Size

      3.8MB

    • MD5

      c494e0bd40fe7164c0cf6e6c0ab48186

    • SHA1

      a03043064d7f95a678e11f600550f4fa127bd07a

    • SHA256

      64e055d6b71f186e6fd3f70f85cd0ce036a22c0e86f7e5e2a1c0b75ac999382d

    • SHA512

      b3ae43aa81da5a927d5382ee344d091a4e739b36d327bf7654bb8bc649fdc5eb52f097d8287746c724527fde3b874a3ed34f24118bdc564065ec81e08118ee9e

    • SSDEEP

      49152:0sNwoFRoyw9Yxq8A5CVzPIygMuSGOp09B/pwJrN6GFVfoPpNf9CXmYnMBR/Gli:bNwoFWyFGCTgBVPG5o28N1bYnMBN

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks