General

  • Target

    1f3a29afb0995951749a8b05da8fe6bb48a3c68d0a459c4a91b86b9fb254906d

  • Size

    2.3MB

  • Sample

    241121-y2b5ys1map

  • MD5

    8b270828553fa64f0299ffb55a3efc1c

  • SHA1

    52f94bde8b4f3b8f7ee09eb1360d00ae122ca977

  • SHA256

    1f3a29afb0995951749a8b05da8fe6bb48a3c68d0a459c4a91b86b9fb254906d

  • SHA512

    ba00373802f46995cea07cf9635c5fccd8f569ee338be661b32b45bed2b23f7283f6239155ecc41be6753c2e05bc8d46b622530f803001ec9240da844342c1fd

  • SSDEEP

    49152:19995d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:19HvesuDRna5JPYGy7bMpL

Malware Config

Targets

    • Target

      1f3a29afb0995951749a8b05da8fe6bb48a3c68d0a459c4a91b86b9fb254906d

    • Size

      2.3MB

    • MD5

      8b270828553fa64f0299ffb55a3efc1c

    • SHA1

      52f94bde8b4f3b8f7ee09eb1360d00ae122ca977

    • SHA256

      1f3a29afb0995951749a8b05da8fe6bb48a3c68d0a459c4a91b86b9fb254906d

    • SHA512

      ba00373802f46995cea07cf9635c5fccd8f569ee338be661b32b45bed2b23f7283f6239155ecc41be6753c2e05bc8d46b622530f803001ec9240da844342c1fd

    • SSDEEP

      49152:19995d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:19HvesuDRna5JPYGy7bMpL

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks