Overview

overview

6

Static

static

3

cryptolaemus

windows10-2004-x64

6

cryptolaemus

windows11-21h2-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    521ab11a586c387b629dda2ed040e71d251d672ac50ab78d708d9bab8d70466c

  • Size

    541KB

  • Sample

    240701-fgtkdszerm

  • MD5

    0d79771bb557f6c22914666f758774a8

  • SHA1

    e68ff9800a835c772d071f7a0ed3ee02c1390282

  • SHA256

    521ab11a586c387b629dda2ed040e71d251d672ac50ab78d708d9bab8d70466c

  • SHA512

    5f96cb550d353fc41c32c008c1dc9435edd88f5c4c7e0b5ea63bbd351df88e6fc293016c251f64f1637adac502ac09d16bc4c87f1204297931008471920546af

  • SSDEEP

    12288:o85ncGaSUuaS//VgaG20eHDp82P5ixWDezjuN:o8uJSUuaF20ejpaWDezjuN

Score
6/10
bootkitpersistence

Malware Config

Targets

    • Target

      521ab11a586c387b629dda2ed040e71d251d672ac50ab78d708d9bab8d70466c

    • Size

      541KB

    • MD5

      0d79771bb557f6c22914666f758774a8

    • SHA1

      e68ff9800a835c772d071f7a0ed3ee02c1390282

    • SHA256

      521ab11a586c387b629dda2ed040e71d251d672ac50ab78d708d9bab8d70466c

    • SHA512

      5f96cb550d353fc41c32c008c1dc9435edd88f5c4c7e0b5ea63bbd351df88e6fc293016c251f64f1637adac502ac09d16bc4c87f1204297931008471920546af

    • SSDEEP

      12288:o85ncGaSUuaS//VgaG20eHDp82P5ixWDezjuN:o8uJSUuaF20ejpaWDezjuN

    Score
    6/10
    bootkitpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks