General
- Target kill.exe
- Size 183KB
- Sample260624-ynmpjaft5n
- SHA256 2f4fb83141f8a5109fa74c6fda2f79e2ee4e3997e9cffd66c2be8bd9869288bd
- MD5 a472ab48f0fda59d57ab3470f8045a7f
- SHA1 d0b1d2d5b703df98dc28753a28f66d7d387e59d4
- SHA512 f1d4770fedbebfe5ab6d94908e6bb4cd396015961ed44ab71e3bde694b6bbf3dfa0ad7465dc2a3efec2311d17afac900d8c4c41929b4c817511b31073ad3745c
- SSDEEP 3072:scI38GreyAlR1lw/CSbpayCy51Qms3QQmrtcvxIK8Mk0oIQILjWqIoCARFe9yA:scIop1lwbbpxCyYDgBWvxVtL1syA
- TLSH T11B045C21B8D2C032D667087098F5CBB59E3EFC510FB5A9DB63840FBA4E206D19B3575A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kill.exe
Resource
win10v2004-20260513-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
kill.exe
Resource
win10ltsc2021-20260513-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
kill.exe
Resource
win11-20260513-en
6 signatures
900 seconds
Behavioral task
behavioral4
Sample
kill.exe
Resource
win11ltsc2024-20260618-en
6 signatures
900 seconds
Malware Config
Targets
-
- Target kill.exe
- Size 183KB
- SHA256 2f4fb83141f8a5109fa74c6fda2f79e2ee4e3997e9cffd66c2be8bd9869288bd
- MD5 a472ab48f0fda59d57ab3470f8045a7f
- SHA1 d0b1d2d5b703df98dc28753a28f66d7d387e59d4
- SHA512 f1d4770fedbebfe5ab6d94908e6bb4cd396015961ed44ab71e3bde694b6bbf3dfa0ad7465dc2a3efec2311d17afac900d8c4c41929b4c817511b31073ad3745c
- SSDEEP 3072:scI38GreyAlR1lw/CSbpayCy51Qms3QQmrtcvxIK8Mk0oIQILjWqIoCARFe9yA:scIop1lwbbpxCyYDgBWvxVtL1syA
- TLSH T11B045C21B8D2C032D667087098F5CBB59E3EFC510FB5A9DB63840FBA4E206D19B3575A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
UAC bypass
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Tasks
static1
Score
3/10
behavioral1
bootkitdefense_evasiondiscoverypersistencetrojan
Score
10/10
behavioral2
bootkitdefense_evasiondiscoverypersistencetrojan
Score
10/10
behavioral3
bootkitdefense_evasiondiscoverypersistencetrojan
Score
10/10
behavioral4
bootkitdefense_evasiondiscoverypersistencetrojan
Score
10/10