Overview

overview

7

Static

static

5

21222d40e9...d4.exe

windows7-x64

7

21222d40e9...d4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4

  • Size

    12.9MB

  • Sample

    250328-slzcnazkx3

  • MD5

    8a4674735cb781536188f313e1ab2fd5

  • SHA1

    2327a59ab3ade1e4c5ac3545dde07dfed6306c6c

  • SHA256

    21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4

  • SHA512

    bdc1948eaa0f741bcbba4ce3a1c6d9131bdd907a1778cbe2cb98ce3d17c10931eb860f8972eaa1636ce7ea90d4bcb92f826600c769df2f2b3b2069b75fea69b3

  • SSDEEP

    393216:e/+8+tPmRyDC7YThjbw7xcr95+8VqYTB6fW2Gmv:e/WtPmR8TpCxO95+8V5v2xv

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Targets

    • Target

      21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4

    • Size

      12.9MB

    • MD5

      8a4674735cb781536188f313e1ab2fd5

    • SHA1

      2327a59ab3ade1e4c5ac3545dde07dfed6306c6c

    • SHA256

      21222d40e9cdee026290f15626de192203519039be6d1e737caef5448296fcd4

    • SHA512

      bdc1948eaa0f741bcbba4ce3a1c6d9131bdd907a1778cbe2cb98ce3d17c10931eb860f8972eaa1636ce7ea90d4bcb92f826600c769df2f2b3b2069b75fea69b3

    • SSDEEP

      393216:e/+8+tPmRyDC7YThjbw7xcr95+8VqYTB6fW2Gmv:e/WtPmR8TpCxO95+8V5v2xv

    Score
    7/10
    bootkitdiscoverypersistenceupx

    • Executes dropped EXE

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks