Overview

overview

9

Static

static

9

43f7709a6c...17.exe

windows7-x64

9

43f7709a6c...17.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43f7709a6c3408eca55af1a45a829b8ed72d37480fe21afa6470c5c45f079017

  • Size

    8.7MB

  • Sample

    240630-tvnsystfjn

  • MD5

    3d8489d1729d418be214531adc43606b

  • SHA1

    00888feb0dc73a1d9a92c3fe3df8e03e40a59044

  • SHA256

    43f7709a6c3408eca55af1a45a829b8ed72d37480fe21afa6470c5c45f079017

  • SHA512

    a3c7d91f6e02c9e78c43d689e9db1023d341c377754c7b2488fdc06e04c0823cdb57e4d2201ac0ab4b3e5723e7014520ce0df9a45d0607266f9f8865a6c05549

  • SSDEEP

    196608:IrfTXa7c9bWU+LEIP+6jU94HRT8B44qCdw37NQCphC9:aXa7c9bWU+LEt94H58jqCy37NzpA

Score
9/10
bootkitoss_akpersistenceupx

Malware Config

Targets

    • Target

      43f7709a6c3408eca55af1a45a829b8ed72d37480fe21afa6470c5c45f079017

    • Size

      8.7MB

    • MD5

      3d8489d1729d418be214531adc43606b

    • SHA1

      00888feb0dc73a1d9a92c3fe3df8e03e40a59044

    • SHA256

      43f7709a6c3408eca55af1a45a829b8ed72d37480fe21afa6470c5c45f079017

    • SHA512

      a3c7d91f6e02c9e78c43d689e9db1023d341c377754c7b2488fdc06e04c0823cdb57e4d2201ac0ab4b3e5723e7014520ce0df9a45d0607266f9f8865a6c05549

    • SSDEEP

      196608:IrfTXa7c9bWU+LEIP+6jU94HRT8B44qCdw37NQCphC9:aXa7c9bWU+LEt94H58jqCy37NzpA

    Score
    9/10
    bootkitoss_akpersistenceupx

    • detect oss ak

      oss ak information detected.

      oss_ak

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks