91c844b8ad32c9119d75e7459579d0d90137d560ee496dc2664caf6e85aba524 | Triage

Sharing

General

Target

91c844b8ad32c9119d75e7459579d0d90137d560ee496dc2664caf6e85aba524
Size

58KB
Sample

221003-kj54esfdh9
MD5

4b74cb34f9927a838389d98f0a9902f2
SHA1

612170ebe4292784434022016892745fa1b472bd
SHA256

91c844b8ad32c9119d75e7459579d0d90137d560ee496dc2664caf6e85aba524
SHA512

8d62c2f0f602c74a526299034c78bf9e03292aff0693bd099f7d09aa738f144ac71c7436c159c66ba482aa29790a297350db33d8104dc01bdda6ff152f9c69b1
SSDEEP

768:qFeskANtWy6U13GXcda9ZQLkr8fRjj42c6TmtAtaK6B7Ix2uAfLiox613zJT1Bmx:qdj0+WOsskrH2NtaK6RiAfLi9JfF81

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  91c844b8ad32c9119d75e7459579d0d90137d560ee496dc2664caf6e85aba524
- Size
  
  58KB
- MD5
  
  4b74cb34f9927a838389d98f0a9902f2
- SHA1
  
  612170ebe4292784434022016892745fa1b472bd
- SHA256
  
  91c844b8ad32c9119d75e7459579d0d90137d560ee496dc2664caf6e85aba524
- SHA512
  
  8d62c2f0f602c74a526299034c78bf9e03292aff0693bd099f7d09aa738f144ac71c7436c159c66ba482aa29790a297350db33d8104dc01bdda6ff152f9c69b1
- SSDEEP
  
  768:qFeskANtWy6U13GXcda9ZQLkr8fRjj42c6TmtAtaK6B7Ix2uAfLiox613zJT1Bmx:qdj0+WOsskrH2NtaK6RiAfLi9JfF81
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence