799be6eb668352d03421bbc212d4b12b89ed67f2d309a2992f48a391f28958f1 | Triage

Sharing

General

Target

799be6eb668352d03421bbc212d4b12b89ed67f2d309a2992f48a391f28958f1
Size

333KB
Sample

221003-ekn9eagegm
MD5

42f619451c2887be1a4217dbd90e6772
SHA1

1cee18eba1fcfe5bf4e65b163d63bf9be1dd0ee8
SHA256

799be6eb668352d03421bbc212d4b12b89ed67f2d309a2992f48a391f28958f1
SHA512

da9d36e66bb7304d0da06a577b0f81ee0ba8a42eb665455442ba3787ade01652a28b0e5a2c3b3627615bc4549c801d40b52faaec310f08540100e848756bb4ed
SSDEEP

6144:nzm01fxxOUCjMOczWjRSvnVW5GJZ2tNYLj8MfsBB+2AnvUhFGM:ny03fVzYKj86s3+2dp

Score

10^/10

bootkit evasion persistence

Malware Config

Targets

- Target
  
  799be6eb668352d03421bbc212d4b12b89ed67f2d309a2992f48a391f28958f1
- Size
  
  333KB
- MD5
  
  42f619451c2887be1a4217dbd90e6772
- SHA1
  
  1cee18eba1fcfe5bf4e65b163d63bf9be1dd0ee8
- SHA256
  
  799be6eb668352d03421bbc212d4b12b89ed67f2d309a2992f48a391f28958f1
- SHA512
  
  da9d36e66bb7304d0da06a577b0f81ee0ba8a42eb665455442ba3787ade01652a28b0e5a2c3b3627615bc4549c801d40b52faaec310f08540100e848756bb4ed
- SSDEEP
  
  6144:nzm01fxxOUCjMOczWjRSvnVW5GJZ2tNYLj8MfsBB+2AnvUhFGM:ny03fVzYKj86s3+2dp
Score

10^/10

bootkit persistence evasion
- Modifies firewall policy service
  evasion
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2