General
Target

21d376f0ec63236e590e58add44c00647588fdeb52b59f34efa43d5219520fb4

Size

616KB

Sample

220520-e9w1jsdbaq

Score
8/10
MD5

87e30ba93b9ebff6e00c0a802530e5fe

SHA1

e54d3e6f3f7033b03db038a6ea43192e26c7792e

SHA256

21d376f0ec63236e590e58add44c00647588fdeb52b59f34efa43d5219520fb4

SHA512

5471ca2af9c61913cd5449a9d49d275a4bcdcc042e109a66e077a57a989bdf9e7a153c6c9ba8837d03927e8177d4e66245f290b83f2c3dc92793f66e210c2bef

Malware Config
Targets
Target

21d376f0ec63236e590e58add44c00647588fdeb52b59f34efa43d5219520fb4

MD5

87e30ba93b9ebff6e00c0a802530e5fe

Filesize

616KB

Score
8/10
SHA1

e54d3e6f3f7033b03db038a6ea43192e26c7792e

SHA256

21d376f0ec63236e590e58add44c00647588fdeb52b59f34efa43d5219520fb4

SHA512

5471ca2af9c61913cd5449a9d49d275a4bcdcc042e109a66e077a57a989bdf9e7a153c6c9ba8837d03927e8177d4e66245f290b83f2c3dc92793f66e210c2bef

Tags

Signatures

  • Office macro that triggers on suspicious action

    Description

    Office document macro which triggers in special circumstances - often malicious.

    Tags

  • Loads dropped DLL

  • Writes to the Master Boot Record (MBR)

    Description

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    Tags

    TTPs

    Bootkit

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
        Execution
          Exfiltration
            Impact
              Initial Access
                Lateral Movement
                  Persistence
                  Privilege Escalation
                    Tasks

                    static1

                    Score
                    N/A

                    behavioral2

                    Score
                    1/10