c7c1ae02ea878e6fbfea4dc69fecbd0a40646258d0f8978af099b02b57986e43 | Triage

Sharing

General

Target

c7c1ae02ea878e6fbfea4dc69fecbd0a40646258d0f8978af099b02b57986e43
Size

3.2MB
Sample

221025-2c1nssebdj
MD5

c675abc27e666aa4e56055709200f10d
SHA1

46b94782a199189f213972a34c3474fb244e6be2
SHA256

c7c1ae02ea878e6fbfea4dc69fecbd0a40646258d0f8978af099b02b57986e43
SHA512

914d4c74508a3b710d0eb9f1ed741c90d3297ec5e9874bf3cf6b5df21bb5e7d021399087c5184f4f0fe06ce71db1c69f115535333f860fe94df0594565840ed7
SSDEEP

24576:EpOmyEmuPTFzC4PsBwEH7H2WBXQMURIibjeWW70y9mUE:EGEmuLFzCesZbDB1UtW7VcD

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  c7c1ae02ea878e6fbfea4dc69fecbd0a40646258d0f8978af099b02b57986e43
- Size
  
  3.2MB
- MD5
  
  c675abc27e666aa4e56055709200f10d
- SHA1
  
  46b94782a199189f213972a34c3474fb244e6be2
- SHA256
  
  c7c1ae02ea878e6fbfea4dc69fecbd0a40646258d0f8978af099b02b57986e43
- SHA512
  
  914d4c74508a3b710d0eb9f1ed741c90d3297ec5e9874bf3cf6b5df21bb5e7d021399087c5184f4f0fe06ce71db1c69f115535333f860fe94df0594565840ed7
- SSDEEP
  
  24576:EpOmyEmuPTFzC4PsBwEH7H2WBXQMURIibjeWW70y9mUE:EGEmuLFzCesZbDB1UtW7VcD
Score

6^/10

bootkit persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Maps connected drives based on registry
  Disk information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence