Overview

overview

6

Static

static

3

Asthepus.exe

windows11-21h2-x64

Resubmissions

29-06-2024 05:47

240629-gg6qdsvfrr 6

29-06-2024 05:41

240629-gdywdavfmr 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Asthepus.exe

  • Size

    493KB

  • Sample

    240629-gg6qdsvfrr

  • MD5

    a11eca8e5a7bec9a2c14f8e6be85d596

  • SHA1

    231c7f6a681e431bcfb66c21ceb3cc2f1f66030e

  • SHA256

    0987158a24b527d5f10a2742d366d7089cf3fdc15a400ccb29609b8bd75f7177

  • SHA512

    0b4d7dc72b9e5e1b36df126eb55e3284a0190aa1940a39b0c4d58470887b0e2171a396e28f55215488b706f1af3a973ab58e9cfcb8b795600ac7cd8698223b94

  • SSDEEP

    6144:h7pDRxrzK8cijaapixdQKqB9pJewBbi85FakMPvuxJnE6fhl4sCBksWSsuBT/:dpDRxrc4igXJv8yFakKvuxJnWsC9VBj

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      Asthepus.exe

    • Size

      493KB

    • MD5

      a11eca8e5a7bec9a2c14f8e6be85d596

    • SHA1

      231c7f6a681e431bcfb66c21ceb3cc2f1f66030e

    • SHA256

      0987158a24b527d5f10a2742d366d7089cf3fdc15a400ccb29609b8bd75f7177

    • SHA512

      0b4d7dc72b9e5e1b36df126eb55e3284a0190aa1940a39b0c4d58470887b0e2171a396e28f55215488b706f1af3a973ab58e9cfcb8b795600ac7cd8698223b94

    • SSDEEP

      6144:h7pDRxrzK8cijaapixdQKqB9pJewBbi85FakMPvuxJnE6fhl4sCBksWSsuBT/:dpDRxrc4igXJv8yFakKvuxJnWsC9VBj

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks