40e77490e064616e15326abce79c33997edc7a07ce0c940a0a1dcfa5b8ce1af1 | Triage

Sharing

General

Target

40e77490e064616e15326abce79c33997edc7a07ce0c940a0a1dcfa5b8ce1af1
Size

237KB
Sample

221004-gd43dsedam
MD5

59a334c58a4fc8be9cba0af31127b440
SHA1

276b3a7db6bcb20aa4de5550a77db696f1126165
SHA256

40e77490e064616e15326abce79c33997edc7a07ce0c940a0a1dcfa5b8ce1af1
SHA512

b99e4e9e926a50c57d5b5f616df6ec778d60a6c83e4bd67811c23b4fab9adb14a72eeea1b9998b8d9a694407a16cea8341ffa1b1eb6ee7550129fbbb19acebb6
SSDEEP

3072:1lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsyuxCBM3PGuxCJTZ:+3kOMeaavF17EP6qyqsNxCSOCCJzZ

Score

8^/10

bootkit persistence upx

Malware Config

Targets

- Target
  
  40e77490e064616e15326abce79c33997edc7a07ce0c940a0a1dcfa5b8ce1af1
- Size
  
  237KB
- MD5
  
  59a334c58a4fc8be9cba0af31127b440
- SHA1
  
  276b3a7db6bcb20aa4de5550a77db696f1126165
- SHA256
  
  40e77490e064616e15326abce79c33997edc7a07ce0c940a0a1dcfa5b8ce1af1
- SHA512
  
  b99e4e9e926a50c57d5b5f616df6ec778d60a6c83e4bd67811c23b4fab9adb14a72eeea1b9998b8d9a694407a16cea8341ffa1b1eb6ee7550129fbbb19acebb6
- SSDEEP
  
  3072:1lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsyuxCBM3PGuxCJTZ:+3kOMeaavF17EP6qyqsNxCSOCCJzZ
Score

8^/10

bootkit persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistenceupx

behavioral2

bootkitpersistenceupx