isaacwiper | 13037b749aa4b1eda538fda26d6ac41c8f7b1d02d83f47b0d187dd645154e033 | Triage

Resubmissions

11-06-2024 14:52

240611-r82wma1fmr 10

02-03-2022 18:01

220302-wlw43sfgh8 10

Sharing

General

Target

13037b749aa4b1eda538fda26d6ac41c8f7b1d02d83f47b0d187dd645154e033
Size

219KB
Sample

220302-wlw43sfgh8
MD5

ecce8845921a91854ab34bff2623151e
SHA1

736a4cfad1ed83a6a0b75b0474d5e01a3a36f950
SHA256

13037b749aa4b1eda538fda26d6ac41c8f7b1d02d83f47b0d187dd645154e033
SHA512

36fda34df70629d054a55823a3cc83f9599446b36576fbc86a6aac6564460789e8b141eeb168d3e4578f28182da874dd840e57b642af1a1a315dfe08a17b53e0

Score

10^/10

isaacwiper bootkit persistence wiper

Malware Config

Targets

- Target
  
  13037b749aa4b1eda538fda26d6ac41c8f7b1d02d83f47b0d187dd645154e033
- Size
  
  219KB
- MD5
  
  ecce8845921a91854ab34bff2623151e
- SHA1
  
  736a4cfad1ed83a6a0b75b0474d5e01a3a36f950
- SHA256
  
  13037b749aa4b1eda538fda26d6ac41c8f7b1d02d83f47b0d187dd645154e033
- SHA512
  
  36fda34df70629d054a55823a3cc83f9599446b36576fbc86a6aac6564460789e8b141eeb168d3e4578f28182da874dd840e57b642af1a1a315dfe08a17b53e0
Score

6^/10

bootkit persistence
- Drops desktop.ini file(s)
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

wiperisaacwiper

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence