General
- Target 52006a9280b53449375fd8d7211a2a8def7e287f93028bb469660ce877bd4a2e
- Size 5.8MB
- Sample260803-vrf5datfna
- SHA256 52006a9280b53449375fd8d7211a2a8def7e287f93028bb469660ce877bd4a2e
Score
6/10
Malware Config
Targets
-
- Target PawnIOSetup.exe
- Size 3.3MB
- SHA256 1f519a22e47187f70a1379a48ca604981c4fcf694f4e65b734aaa74a9fba3032
Score1/10 -
- Target README.pdf
- Size 385KB
- SHA256 7d7c2143c84c57fa2976ce9e5b1319c32fac78d57372a712a00a4c7c7e17ec3f
Score3/10 -
- Target gnwinfo.exe
- Size 1.2MB
- SHA256 0a4a3755a4b6f8eec5f7b90bcc7b45cedca1d83e964e009766451f7acb8c1225
Score6/10-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
- Target gnwinfox86.exe
- Size 1.0MB
- SHA256 e6fea9d2ffeaeb7b0593fe065f6b37fe68ba2cab66b95ed1eb7f26c3f75acce6
Score6/10-
Checks whether UAC is enabled
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
- Target hw_report.ps1
- Size 18KB
- SHA256 eb801cd844edda6dc143c4f1f55ad41fe846310fa6dac989b04e8e6d19f717c8
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-
- Target libcdi.dll
- Size 513KB
- SHA256 861d53bbb54d7251b8bc26eb84f7477c965437666eb801f7ddfa2b36e4837077
Score1/10 -
- Target libcdix86.dll
- Size 439KB
- SHA256 bc4e4c7d6e3be668492377cdab2563a099c2a63a4c765571aef66bec32163766
Score3/10 -
- Target nwinfo.exe
- Size 848KB
- SHA256 ccd2a555086807036319d261e43855685fa0e009ed808a035fd189d9d6929d4c
Score5/10-
Drops file in System32 directory
-
- Target nwinfox86.exe
- Size 756KB
- SHA256 1250ef9422cf42a9d4905ab4cfbd21dcb29c8a2927e9ce04a6a84f3e1f20eecd
Score3/10
MITRE ATT&CK Enterprise v16
Tasks
static1
Score
3/10
behavioral1
Score
1/10
behavioral2
Score
1/10
behavioral3
Score
3/10
behavioral4
Score
3/10
behavioral5
Score
6/10
behavioral6
Score
6/10
behavioral7
Score
6/10
behavioral8
Score
6/10
behavioral9
Score
6/10
behavioral10
Score
6/10
behavioral11
Score
1/10
behavioral12
Score
1/10
behavioral13
Score
3/10
behavioral14
Score
3/10
behavioral15
Score
5/10
behavioral16
Score
5/10
behavioral17
Score
3/10
behavioral18
Score
3/10