Overview

overview

10

Static

static

1

cpu-z_2.15-rog-en.exe

windows10-ltsc_2021-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cpu-z_2.15-rog-en.exe

  • Size

    3.1MB

  • Sample

    250404-by7fcszmz8

  • MD5

    9c7d97f1074b5eb1e16938558c1d38a0

  • SHA1

    278e9b8f3deade747e2076a8db5186876f891a68

  • SHA256

    fc56af8748f41fa6bdd55cba1bca97f5e65540aeb331821ae4a7a8bd675f445e

  • SHA512

    d6805debc6f0ebcdc5b8efc43195753683d4e7b372ebde50870e3a8618b7fa3b3a071b4a885ed7d6bc2febd98fec71a8c9d758b8b59a076a0a48944459f1adab

  • SSDEEP

    49152:fwREDX5zEq/9+uWuOA9NElCObyhwxnQhwM0o8DA3HWsMr7k:fwREL79tW/M3ObyhwShwM0e3MU

Score
10/10
bootkitdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target

      cpu-z_2.15-rog-en.exe

    • Size

      3.1MB

    • MD5

      9c7d97f1074b5eb1e16938558c1d38a0

    • SHA1

      278e9b8f3deade747e2076a8db5186876f891a68

    • SHA256

      fc56af8748f41fa6bdd55cba1bca97f5e65540aeb331821ae4a7a8bd675f445e

    • SHA512

      d6805debc6f0ebcdc5b8efc43195753683d4e7b372ebde50870e3a8618b7fa3b3a071b4a885ed7d6bc2febd98fec71a8c9d758b8b59a076a0a48944459f1adab

    • SSDEEP

      49152:fwREDX5zEq/9+uWuOA9NElCObyhwxnQhwM0o8DA3HWsMr7k:fwREL79tW/M3ObyhwShwM0e3MU

    Score
    10/10
    bootkitdefense_evasiondiscoverypersistence

    • Modifies visibility of file extensions in Explorer

      defense_evasion

    • Modifies visiblity of hidden/system files in Explorer

      defense_evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks