eb7ecf266c26118af342dbb21c1aff74156dc82029f99a365358061fe6d2a30b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb7ecf266c26118af342dbb21c1aff74156dc82029f99a365358061fe6d2a30b
Size

376KB
Sample

221012-v2569aded9
MD5

7afde63c27b3d782dbcc5da91e9bf720
SHA1

03130c6c9905f0203610b4bafd596fac15f62a2c
SHA256

eb7ecf266c26118af342dbb21c1aff74156dc82029f99a365358061fe6d2a30b
SHA512

81e295b890de7962d24bdf4eb66aa4327e995993d544c4dbafa5d51da0f1dea22846ae32ae42483c355dfa98b923a8780f46ef4344b2e4c5a843c1362b675b65
SSDEEP

6144:cQY+7m4CFwuQQQQQQQQQQQQwvQ5EQQQQQQQQQQQQQQQQQQQ1O9WBEHaQQQQQQQQR:cl+7+FF5Nm+

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  eb7ecf266c26118af342dbb21c1aff74156dc82029f99a365358061fe6d2a30b
- Size
  
  376KB
- MD5
  
  7afde63c27b3d782dbcc5da91e9bf720
- SHA1
  
  03130c6c9905f0203610b4bafd596fac15f62a2c
- SHA256
  
  eb7ecf266c26118af342dbb21c1aff74156dc82029f99a365358061fe6d2a30b
- SHA512
  
  81e295b890de7962d24bdf4eb66aa4327e995993d544c4dbafa5d51da0f1dea22846ae32ae42483c355dfa98b923a8780f46ef4344b2e4c5a843c1362b675b65
- SSDEEP
  
  6144:cQY+7m4CFwuQQQQQQQQQQQQwvQ5EQQQQQQQQQQQQQQQQQQQ1O9WBEHaQQQQQQQQR:cl+7+FF5Nm+
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

bootkitpersistence