fb76f31be56f469a03c2c109a985d4dfc4e1e0e9be2e0b77858650e4fc9101ad | Triage

Sharing

General

Target

fb76f31be56f469a03c2c109a985d4dfc4e1e0e9be2e0b77858650e4fc9101ad
Size

244KB
Sample

221002-nv2f6afadj
MD5

6bba9be9f9e5dae39a2e24b3c262e9a1
SHA1

d9a202584ddc3a805ef8c326c36fc29eff2c78e1
SHA256

fb76f31be56f469a03c2c109a985d4dfc4e1e0e9be2e0b77858650e4fc9101ad
SHA512

0c2d1801ff2c103ea88bae803329a330cde5f99862d176f132bb48feb9e1c4b4ff050740e282ac45269ba3f0e729e2f725800ed64f33e1922fbee6d2076bbacd
SSDEEP

6144:hHfolR5MHwC+H1lySquMborPtCLoD4TyQOI5JgpcvqNplc5LU5qaU9:hwj5MHwCO7yfosT0Iw5p+LU5qt9

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  fb76f31be56f469a03c2c109a985d4dfc4e1e0e9be2e0b77858650e4fc9101ad
- Size
  
  244KB
- MD5
  
  6bba9be9f9e5dae39a2e24b3c262e9a1
- SHA1
  
  d9a202584ddc3a805ef8c326c36fc29eff2c78e1
- SHA256
  
  fb76f31be56f469a03c2c109a985d4dfc4e1e0e9be2e0b77858650e4fc9101ad
- SHA512
  
  0c2d1801ff2c103ea88bae803329a330cde5f99862d176f132bb48feb9e1c4b4ff050740e282ac45269ba3f0e729e2f725800ed64f33e1922fbee6d2076bbacd
- SSDEEP
  
  6144:hHfolR5MHwC+H1lySquMborPtCLoD4TyQOI5JgpcvqNplc5LU5qaU9:hwj5MHwCO7yfosT0Iw5p+LU5qt9
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2