Overview

overview

8

Static

static

5

X.exe

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    X.exe

  • Size

    102KB

  • Sample

    241127-h2wllazmgj

  • MD5

    d89f31f22563eb0fdf3828f4df78ed4f

  • SHA1

    7a2a4c411831ebc8a474a68caa810117545f6a0e

  • SHA256

    72ea0305c64249657bc7be7ffefe6403a74f6bed8c90ef191b7f04d7175d9c8f

  • SHA512

    29826d851433b8603e923bc81da066662f6bb107564feb8e1ae9bb344138c2ab4ec7157595aefcec248feb1caa51285293dae927f2ab66b60b7bd8a17e2a2569

  • SSDEEP

    1536:T/LHGj7cvtORUxy6rlp65LkgZqARZW7wIUg9rF0ZzV0imYFU47o9Tuui:7LHCcvMRUc6JcsA677sZ6vYFx7oZo

Score
8/10
bootkitdiscoveryexploitpersistenceupx

Malware Config

Targets

    • Target

      X.exe

    • Size

      102KB

    • MD5

      d89f31f22563eb0fdf3828f4df78ed4f

    • SHA1

      7a2a4c411831ebc8a474a68caa810117545f6a0e

    • SHA256

      72ea0305c64249657bc7be7ffefe6403a74f6bed8c90ef191b7f04d7175d9c8f

    • SHA512

      29826d851433b8603e923bc81da066662f6bb107564feb8e1ae9bb344138c2ab4ec7157595aefcec248feb1caa51285293dae927f2ab66b60b7bd8a17e2a2569

    • SSDEEP

      1536:T/LHGj7cvtORUxy6rlp65LkgZqARZW7wIUg9rF0ZzV0imYFU47o9Tuui:7LHCcvMRUc6JcsA677sZ6vYFx7oZo

    Score
    8/10
    bootkitdiscoveryexploitpersistenceupx

    • Possible privilege escalation attempt

      exploit

    • Modifies file permissions

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks