Overview

overview

6

Static

static

1

61b587387d...ac.exe

windows7-x64

1

61b587387d...ac.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    61b587387d7eb0bcd6096ba237b11a1c6932a11aa440123422fe9ea49773c8ac.exe

  • Size

    2.7MB

  • Sample

    240701-bhtvbs1frd

  • MD5

    ac49aa41a5551500d3b78db56c5ba720

  • SHA1

    f97816fdad7521097cbaa2830115aac079d9a6cd

  • SHA256

    61b587387d7eb0bcd6096ba237b11a1c6932a11aa440123422fe9ea49773c8ac

  • SHA512

    8627ceaa7753247ed52d2884347e212f1ca5c9149710dbbe798d5acccf9c3bd67e31385656ca37f68f065739b045eb973aad41aaabf26f97099c73b6bffb3904

  • SSDEEP

    49152:KhBiTCL3IpB+IkhRTWEqfCuXfJ216k4xIURehptc8:KhBiTCL3S+IkhRTWEqfn0FJEehp+8

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      61b587387d7eb0bcd6096ba237b11a1c6932a11aa440123422fe9ea49773c8ac.exe

    • Size

      2.7MB

    • MD5

      ac49aa41a5551500d3b78db56c5ba720

    • SHA1

      f97816fdad7521097cbaa2830115aac079d9a6cd

    • SHA256

      61b587387d7eb0bcd6096ba237b11a1c6932a11aa440123422fe9ea49773c8ac

    • SHA512

      8627ceaa7753247ed52d2884347e212f1ca5c9149710dbbe798d5acccf9c3bd67e31385656ca37f68f065739b045eb973aad41aaabf26f97099c73b6bffb3904

    • SSDEEP

      49152:KhBiTCL3IpB+IkhRTWEqfCuXfJ216k4xIURehptc8:KhBiTCL3S+IkhRTWEqfn0FJEehp+8

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks