a56ec9c918695cc0e5018ac4805df2120f9dcb8eaf9aa19489ae484b02518776 | Triage

Sharing

General

Target

a56ec9c918695cc0e5018ac4805df2120f9dcb8eaf9aa19489ae484b02518776
Size

2.4MB
Sample

220524-txq14ahea2
MD5

dc443bac4fcb66bbbba26bb3554c2b55
SHA1

971ece1f04fa5593ec787fc3838a1ce1255860d8
SHA256

a56ec9c918695cc0e5018ac4805df2120f9dcb8eaf9aa19489ae484b02518776
SHA512

03a0b6e5320405db14f2d07476600e3886eb562f413b48a0f306f25325af54fc322b5b9c9ddc26c141b9bf0da873007ab3dc8712b7e390fff6ac7decae93489d

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  a56ec9c918695cc0e5018ac4805df2120f9dcb8eaf9aa19489ae484b02518776
- Size
  
  2.4MB
- MD5
  
  dc443bac4fcb66bbbba26bb3554c2b55
- SHA1
  
  971ece1f04fa5593ec787fc3838a1ce1255860d8
- SHA256
  
  a56ec9c918695cc0e5018ac4805df2120f9dcb8eaf9aa19489ae484b02518776
- SHA512
  
  03a0b6e5320405db14f2d07476600e3886eb562f413b48a0f306f25325af54fc322b5b9c9ddc26c141b9bf0da873007ab3dc8712b7e390fff6ac7decae93489d
Score

8^/10

bootkit persistence
- Drops file in Drivers directory
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence