8870d706e08ddb73e16bb07a0eb813bd83bb512a6435b55841caf5a5df7907fa | Triage

Sharing

General

Target

8870d706e08ddb73e16bb07a0eb813bd83bb512a6435b55841caf5a5df7907fa
Size

84KB
Sample

220919-k81v1aaaf2
MD5

5ee340cd83fd65e07a3b3c340099f489
SHA1

966ed0bb8fd37e0df01d249446b1596b850da670
SHA256

8870d706e08ddb73e16bb07a0eb813bd83bb512a6435b55841caf5a5df7907fa
SHA512

099fa28e338f10e7c3d38bfaa2e5d48bf24f9be7b0ba80850011a068965575bb31f5d421bbf7492a805d90184731e2e395b71bbc4e20a1ebad15f762e41d4b79
SSDEEP

1536:JI6S0ezyD3LxH1OpE081GNUeAcAeezk15RrK:JI6SVyD3Lx4pE081GqcA4pr

Score

6^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  8870d706e08ddb73e16bb07a0eb813bd83bb512a6435b55841caf5a5df7907fa
- Size
  
  84KB
- MD5
  
  5ee340cd83fd65e07a3b3c340099f489
- SHA1
  
  966ed0bb8fd37e0df01d249446b1596b850da670
- SHA256
  
  8870d706e08ddb73e16bb07a0eb813bd83bb512a6435b55841caf5a5df7907fa
- SHA512
  
  099fa28e338f10e7c3d38bfaa2e5d48bf24f9be7b0ba80850011a068965575bb31f5d421bbf7492a805d90184731e2e395b71bbc4e20a1ebad15f762e41d4b79
- SSDEEP
  
  1536:JI6S0ezyD3LxH1OpE081GNUeAcAeezk15RrK:JI6SVyD3Lx4pE081GqcA4pr
Score

6^/10

bootkit discovery persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2