Overview

overview

7

Static

static

3

843c0c3eda...7N.exe

windows7-x64

7

843c0c3eda...7N.exe

windows10-2004-x64

7

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows7-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows7-x64

3

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDIR/xID.dll

windows7-x64

3

$PLUGINSDIR/xID.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    843c0c3edae1d5ff1b0ada4015d957d2009137857aeff22f672488b023d8c947N.exe

  • Size

    139KB

  • Sample

    241129-m895saxjhk

  • MD5

    5bd4b79bcdc6c1bf30ea6105bc90ac30

  • SHA1

    356a275e8792c795bb76dbcf8342b046dd37314e

  • SHA256

    843c0c3edae1d5ff1b0ada4015d957d2009137857aeff22f672488b023d8c947

  • SHA512

    961d10c2d713a76f99289167c6da783de59e69e840b9c475333c84c0f3c234830c7767a1890bc37ce1b1cfa6c15935958a288330ad0c3bc2ca303bcd8faba2b0

  • SSDEEP

    3072:rYU94fDhmJCSV+DwmKKxM/jqD0RJ/DX6U9l8MDuHGdDGo3s:rcgawmKEM/ucbmMDIbEs

Score
7/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      843c0c3edae1d5ff1b0ada4015d957d2009137857aeff22f672488b023d8c947N.exe

    • Size

      139KB

    • MD5

      5bd4b79bcdc6c1bf30ea6105bc90ac30

    • SHA1

      356a275e8792c795bb76dbcf8342b046dd37314e

    • SHA256

      843c0c3edae1d5ff1b0ada4015d957d2009137857aeff22f672488b023d8c947

    • SHA512

      961d10c2d713a76f99289167c6da783de59e69e840b9c475333c84c0f3c234830c7767a1890bc37ce1b1cfa6c15935958a288330ad0c3bc2ca303bcd8faba2b0

    • SSDEEP

      3072:rYU94fDhmJCSV+DwmKKxM/jqD0RJ/DX6U9l8MDuHGdDGo3s:rcgawmKEM/ucbmMDIbEs

    Score
    7/10
    bootkitdiscoverypersistence

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/Md5dll.dll

    • Size

      8KB

    • MD5

      a7d710e78711d5ab90e4792763241754

    • SHA1

      f31cecd926c5d497aba163a17b75975ec34beb13

    • SHA256

      9b05dd603f13c196f3f21c43f48834208fed2294f7090fcd1334931014611fb2

    • SHA512

      f0ca2d6f9a8aeac84ef8b051154a041adffc46e3e9aced142e9c7bf5f7272b047e1db421d38cb2d9182d7442bee3dd806618b019ec042a23ae0e71671d2943c0

    • SSDEEP

      96:YV2qpbvYSflug0Dvxn6GuKM9sh1gdrN9+oB7FT9WibOoBZcko5N/:Yt5lugRK8hlvbwkKV

    Score
    3/10
    discovery
    behavioral3behavioral4

    • Target

      $PLUGINSDIR/NSISdl.dll

    • Size

      14KB

    • MD5

      f716c100f551ac57e862c7b72dfe2b87

    • SHA1

      a6fb358fd268507535178a8827943f1905f2606b

    • SHA256

      d92b88c3096a5d09c1f9744b62668d588cc8b1992fd88fa5c88c4636121c9f44

    • SHA512

      3d841154199d59d0f9cbf15ec4146de1e967d4292f3a78db8764afab5a9a242f38e1f0e1bf3943d06e5be5018a35cf7c441744a8cf542cb4001ae6b375f244cc

    • SSDEEP

      192:o4lsN55M8r67wmsvJI5a299sfoG8I+WhPB3RY+h/G3DNl/qYcVp/12QgszA:oysdM80dCI5a2LsQ5IlPNRY00AlAsU

    Score
    3/10
    discovery
    behavioral5behavioral6

    • Target

      $PLUGINSDIR/System.dll

    • Size

      10KB

    • MD5

      4fbb4a2cd711fc1fe84f3dc30c491dc9

    • SHA1

      888e01ae6e64e7326f88df9a30587f699eab154a

    • SHA256

      c3b05f4faf5e8903d5b4cb4a8ce4bbf2e8144725b98d8787d51c117b6efa9bc2

    • SHA512

      92dcf99672a5935065df6492e27abb653679f1db6dcddfde87cd14260c94a870327826b23cc2f338381b3eb53d07c1a3867806f6ff94533db5195b895a856847

    • SSDEEP

      192:CO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1argMO:XKAFERdlxhGRYUzqZar

    Score
    3/10
    discovery
    behavioral7behavioral8

    • Target

      $PLUGINSDIR/nsDialogs.dll

    • Size

      8KB

    • MD5

      6e5d67de86bbe1424c948ec22490e16e

    • SHA1

      eb472a706f5b28f3151c14741926e1107b5bfafd

    • SHA256

      d337a4fb3a455b847696ac70a6c070272e108e094d2b4395e3bdc1c76b86b8ae

    • SHA512

      0ed74440e8a2f7af0d8412410d36a160ddbb362a2dd762297029f7997b2040e27aa0ca1bddb918197956b3280e036fcfc7ebab7adf665d93828479f1d5fe2314

    • SSDEEP

      96:rZ5RwaB9dE0/PvQMuql/ODzN3ZOyGE1xiR0r2HpYkUdiw4:rZL7/AMzUz5ZOtEW0r2JxUdi

    Score
    3/10
    discovery
    behavioral10behavioral9

    • Target

      $PLUGINSDIR/xID.dll

    • Size

      3KB

    • MD5

      76d2faad042161f24b6c9c78de3bd265

    • SHA1

      12518e1ba9e96dc202e6c12267650e52f1058664

    • SHA256

      0b31ee64cab09f19e672b3d7f7d11516fe1cd373c2e2861a955b84d054c0507f

    • SHA512

      cea11e232eabf2d525b09cae03e8f8a0b83f92a718f8cf92308d7f31bd4f92ab96c34c1107dbed14517f17ee41a84afd3433f42148edebfbaeca78a517b7e508

    Score
    3/10
    discovery
    behavioral11behavioral12

MITRE ATT&CK Enterprise v15

Tasks