General
- Target 342.rar
- Size 72KB
- Sample260718-sttgdaev5k
- SHA256 c77c4fbac35971aaa9fff14875555283d92c5d70d72b38dfb4700bc348292640
- MD5 03f6797f04659244a1aaaf781d15e8c9
- SHA1 39ff6ab77d83f9073f067068bc0d21ae725bfb80
- SHA512 d3c2f21e9a2bc122297e6456e56664b5c9504d25226dbbb69663434ddad65711abcbc712c93195e43f33e1d6da13de436571e1c6e13492fe7c25c614da5d32a3
- SSDEEP 1536:dYk5SoU+P7X+6c5p6sBQ0PdoTKUW+tWpfMdHdrADe6bvmA3TIUap:iQE+u5BbckpfIdrA6WvmQT5i
- TLSH T1197302E84062BFB9B35A2709C0867F12D6B227508B95D89714375F18E1BD10CB27FA6B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Debug/net8.0-windows/9et.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Debug/net8.0-windows/9et.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Debug/net8.0-windows/9et.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Debug/net8.0-windows/9et.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target Debug/net8.0-windows/9et.dll
- Size 13KB
- SHA256 72c8c5c1e8cb753ec175a5d6929397be699454912e85de5c642dad08b588316f
- MD5 6f87a11f95cdef443faf249ad2905cb2
- SHA1 37d16f1819230a2ad99e05e55c0c8fed6bcf8878
- SHA512 f781d0263b1971b1ffea96a9410ac1b9e15935b2f738abaebfb04c97852ee200f1c5e1cf8ed010d16f7770a803040379b3a6fdb583335a92ffd9700423ef3538
- SSDEEP 384:xhOgzJXqde56KSZBqqXkj1IhVn5gIO2on4CpMKfe:blqdalAg3nHe
- TLSH T1D052E758FBD8C524D9395AB1EEF3D3244339B985DD62CF4F298A608B1A227445BA0F70
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Debug/net8.0-windows/9et.exe
- Size 148KB
- SHA256 8b3eec1c36026d20e9047eb5851b649575d9d043d0123523ab8741ff5164b642
- MD5 4c07a9ffd4f6c223ac20428b974c6766
- SHA1 03d66c54b94af5c03fa2d5ddb9c2c3e7b7df4a28
- SHA512 d080f6d6b1677c2775c70b0aa34b2507c1afab447bffd2c7579cea4dd868f23fa196da7787b7d397f8d75a61f19d25e4d1e1a53f24fe656fb802932c818a7e7d
- SSDEEP 3072:sqeXA/4yIg9vkNPNu6H6xCYOiVUE265UJO:svgvkNFNaxmNE0J
- TLSH T103E33B07A2A851BDE1B7D679CD924D41FB7378598B71A7CF03504AB60E63BD0AE39302
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1