Overview

overview

6

Static

static

1

6c5d35897b...50.exe

windows7-x64

6

6c5d35897b...50.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c5d35897b2b9ededd483332961d22dd30da89d988ff734078e16e581b2aa650

  • Size

    1021KB

  • Sample

    240629-y7tl7avgna

  • MD5

    24838071fa3082dcc1f9379e6bf8cb78

  • SHA1

    d30a859c10b7c6a7809d87396e594ea359f8d806

  • SHA256

    6c5d35897b2b9ededd483332961d22dd30da89d988ff734078e16e581b2aa650

  • SHA512

    1e28f96e2c516a1055bfd6663242571f6c3ed818b48b042aa44ffba5da36c1cfe9aeb350d4886b1e39c39860ba9dff1facaaf6e2233e2bb41569a05a88498c9d

  • SSDEEP

    24576:eJ8/AZcOW8aPtZRVlZ2pnkuoYKqsjut+CybU8w+9w/V1cggnqd9:eJcOvMtZ3uOHYKXu50w+9knQnqd9

Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target

      6c5d35897b2b9ededd483332961d22dd30da89d988ff734078e16e581b2aa650

    • Size

      1021KB

    • MD5

      24838071fa3082dcc1f9379e6bf8cb78

    • SHA1

      d30a859c10b7c6a7809d87396e594ea359f8d806

    • SHA256

      6c5d35897b2b9ededd483332961d22dd30da89d988ff734078e16e581b2aa650

    • SHA512

      1e28f96e2c516a1055bfd6663242571f6c3ed818b48b042aa44ffba5da36c1cfe9aeb350d4886b1e39c39860ba9dff1facaaf6e2233e2bb41569a05a88498c9d

    • SSDEEP

      24576:eJ8/AZcOW8aPtZRVlZ2pnkuoYKqsjut+CybU8w+9w/V1cggnqd9:eJcOvMtZ3uOHYKXu50w+9knQnqd9

    Score
    6/10
    bootkitdiscoverypersistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks