768a17e6cc3e9f13cfe65ada25a3890b606bcb39a2eb7684cdef0fbac3c45a0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

768a17e6cc3e9f13cfe65ada25a3890b606bcb39a2eb7684cdef0fbac3c45a0f
Size

198KB
Sample

221030-tzd5baaac4
MD5

82637dbf587766fb74cb8f56bd77141e
SHA1

c39ccaceed8dd70172d67eb87ea1a318c906f437
SHA256

768a17e6cc3e9f13cfe65ada25a3890b606bcb39a2eb7684cdef0fbac3c45a0f
SHA512

9b14b85583fbc031a643722ba1b4b9d55f5456702ca7511ac12dc21c44b41cedd02846d8257d599dfbf55ce631d0d70aa93f22cc4335c7117ff33b696a4e78ed
SSDEEP

3072:BrnCBUfF7FqrIu96HM0XUGXU2Fo21364EoiJeeI+StSqYLj8MfseR/l10ysFYCl:BDGUDKnVW5GJZ2tNYLj8MfsYl10ybCl

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  768a17e6cc3e9f13cfe65ada25a3890b606bcb39a2eb7684cdef0fbac3c45a0f
- Size
  
  198KB
- MD5
  
  82637dbf587766fb74cb8f56bd77141e
- SHA1
  
  c39ccaceed8dd70172d67eb87ea1a318c906f437
- SHA256
  
  768a17e6cc3e9f13cfe65ada25a3890b606bcb39a2eb7684cdef0fbac3c45a0f
- SHA512
  
  9b14b85583fbc031a643722ba1b4b9d55f5456702ca7511ac12dc21c44b41cedd02846d8257d599dfbf55ce631d0d70aa93f22cc4335c7117ff33b696a4e78ed
- SSDEEP
  
  3072:BrnCBUfF7FqrIu96HM0XUGXU2Fo21364EoiJeeI+StSqYLj8MfseR/l10ysFYCl:BDGUDKnVW5GJZ2tNYLj8MfsYl10ybCl
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2