0eca2a787e561acf25d5532971c735c04d95c99fd7db612864b7eb35bc916b75 | Triage

Sharing

General

Target

0eca2a787e561acf25d5532971c735c04d95c99fd7db612864b7eb35bc916b75
Size

237KB
Sample

220524-wl5ffscch9
MD5

63bb49f37aa25a2c83b1fd2040ca162e
SHA1

e5f7b42635fedb27f5627989a621d8ca486c35fa
SHA256

0eca2a787e561acf25d5532971c735c04d95c99fd7db612864b7eb35bc916b75
SHA512

7811e1fe99bb835490193c5848468f03725821a29cde561356876ffdee3a10d338d59bc410c3e7fcb053eceb1ee1606feeae18a13c6a2d534e27ad8a2dcc3e5d

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  0eca2a787e561acf25d5532971c735c04d95c99fd7db612864b7eb35bc916b75
- Size
  
  237KB
- MD5
  
  63bb49f37aa25a2c83b1fd2040ca162e
- SHA1
  
  e5f7b42635fedb27f5627989a621d8ca486c35fa
- SHA256
  
  0eca2a787e561acf25d5532971c735c04d95c99fd7db612864b7eb35bc916b75
- SHA512
  
  7811e1fe99bb835490193c5848468f03725821a29cde561356876ffdee3a10d338d59bc410c3e7fcb053eceb1ee1606feeae18a13c6a2d534e27ad8a2dcc3e5d
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2