Overview

overview

6

Static

static

3

cryptolaemus

windows10-2004-x64

6

cryptolaemus

windows11-21h2-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae9ecc25a582c737f43bf7531e065dad393ae59cc779061c306697fa891bac01

  • Size

    549KB

  • Sample

    240630-rrh27ayhmg

  • MD5

    652838c3937011d64bfb0b320e486e9f

  • SHA1

    822f25f8e9c1945a9286c3099e6948aa7191a1b6

  • SHA256

    ae9ecc25a582c737f43bf7531e065dad393ae59cc779061c306697fa891bac01

  • SHA512

    d996fb1f6dfff04a29aaab2a39a8bfb78c559cda98989cd1b3600b9e16ebbf9ef8a0dced28897f3535b7f2d0d619323653725b6b000ee27adef8e27a75b687d9

  • SSDEEP

    12288:mVO89AEKEwJYBu56ns/GNGRlD5n3QJY/RgI17jg+0AHd:eOlEKXJG6atYD5d57jb0AHd

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      ae9ecc25a582c737f43bf7531e065dad393ae59cc779061c306697fa891bac01

    • Size

      549KB

    • MD5

      652838c3937011d64bfb0b320e486e9f

    • SHA1

      822f25f8e9c1945a9286c3099e6948aa7191a1b6

    • SHA256

      ae9ecc25a582c737f43bf7531e065dad393ae59cc779061c306697fa891bac01

    • SHA512

      d996fb1f6dfff04a29aaab2a39a8bfb78c559cda98989cd1b3600b9e16ebbf9ef8a0dced28897f3535b7f2d0d619323653725b6b000ee27adef8e27a75b687d9

    • SSDEEP

      12288:mVO89AEKEwJYBu56ns/GNGRlD5n3QJY/RgI17jg+0AHd:eOlEKXJG6atYD5d57jb0AHd

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks