a240c02ce1f8565048d1cb43a39b52ab2d4aa902d5f8301627f9a826829d4ad6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a240c02ce1f8565048d1cb43a39b52ab2d4aa902d5f8301627f9a826829d4ad6
Size

104KB
Sample

221002-sey4badcak
MD5

6bb66a44f1fc83175b25c79f4befe707
SHA1

a6e4525102cc237debb09fb34bd39e64ae187299
SHA256

a240c02ce1f8565048d1cb43a39b52ab2d4aa902d5f8301627f9a826829d4ad6
SHA512

74f6668fa4b9655c072c2cf60f2cbed443db1297b3191c76b267a36df66ccbd37f8b325d9b8bf4a31440dd8f6274c3d43465ac6b04101a8b98ab538ab4ffec0b
SSDEEP

1536:2IijiRj2dW8fDntn7bJjVvhBGP5t15aEvfFkWGq6cjTA:2Wj2d37tHJjQP5tS2dkWGqzjTA

Score

6^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  a240c02ce1f8565048d1cb43a39b52ab2d4aa902d5f8301627f9a826829d4ad6
- Size
  
  104KB
- MD5
  
  6bb66a44f1fc83175b25c79f4befe707
- SHA1
  
  a6e4525102cc237debb09fb34bd39e64ae187299
- SHA256
  
  a240c02ce1f8565048d1cb43a39b52ab2d4aa902d5f8301627f9a826829d4ad6
- SHA512
  
  74f6668fa4b9655c072c2cf60f2cbed443db1297b3191c76b267a36df66ccbd37f8b325d9b8bf4a31440dd8f6274c3d43465ac6b04101a8b98ab538ab4ffec0b
- SSDEEP
  
  1536:2IijiRj2dW8fDntn7bJjVvhBGP5t15aEvfFkWGq6cjTA:2Wj2d37tHJjQP5tS2dkWGqzjTA
Score

6^/10

bootkit discovery persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2