General

  • Target

    79e6aac46bb93b33979e7c7d88a6627e8c4c301001f41b0d6907afa53bbb7aaf

  • Size

    2.3MB

  • Sample

    241121-y2q9wa1mcj

  • MD5

    e4b4f8b5121b85504af368706305b96d

  • SHA1

    07395240c7ca4f1ef835ede32c9405fb9e239512

  • SHA256

    79e6aac46bb93b33979e7c7d88a6627e8c4c301001f41b0d6907afa53bbb7aaf

  • SHA512

    d1e8fd8808d7fe377df2fbb60a65da8c3f2cccb63eb6d12262caccf5f4230f1a716a846463c1a55444bc6e6621159230f16a02e4d069eeba1d71312afb4157f9

  • SSDEEP

    49152:f9V95d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:f9/vesuDRna5JPYGy7bMpL

Malware Config

Targets

    • Target

      79e6aac46bb93b33979e7c7d88a6627e8c4c301001f41b0d6907afa53bbb7aaf

    • Size

      2.3MB

    • MD5

      e4b4f8b5121b85504af368706305b96d

    • SHA1

      07395240c7ca4f1ef835ede32c9405fb9e239512

    • SHA256

      79e6aac46bb93b33979e7c7d88a6627e8c4c301001f41b0d6907afa53bbb7aaf

    • SHA512

      d1e8fd8808d7fe377df2fbb60a65da8c3f2cccb63eb6d12262caccf5f4230f1a716a846463c1a55444bc6e6621159230f16a02e4d069eeba1d71312afb4157f9

    • SSDEEP

      49152:f9V95d76suD+XFA+5aa5i50PYDwyt64fQyHbbf08xwmaQFur:f9/vesuDRna5JPYGy7bMpL

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks