dac3c7a0e28938a2a2c649e6728716c013a02bf67c0913935b43584c26d203a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dac3c7a0e28938a2a2c649e6728716c013a02bf67c0913935b43584c26d203a4
Size

198KB
Sample

221030-v4j2ssdabr
MD5

82018436dbd9068b0cd46dc5bfca5f16
SHA1

86f8108e106166d2138d0f87e46a45ef4af11161
SHA256

dac3c7a0e28938a2a2c649e6728716c013a02bf67c0913935b43584c26d203a4
SHA512

863ba28a5ad2bed1806a6b3814ea2238b06f350f48fc50ee0f161446b9dbad52761a0c9ea89b611332e7b5c3313ec3fa9ff1355b547b6169cbfd2f98d9cfb9a1
SSDEEP

3072:IJ797h5NGMhjNyHG3396HM0XUGXU2Fo21364EoiJeeI+StSqYLj8MfseRA11UO1h:q797CHenVW5GJZ2tNYLj8Mfsz4V7d0

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  dac3c7a0e28938a2a2c649e6728716c013a02bf67c0913935b43584c26d203a4
- Size
  
  198KB
- MD5
  
  82018436dbd9068b0cd46dc5bfca5f16
- SHA1
  
  86f8108e106166d2138d0f87e46a45ef4af11161
- SHA256
  
  dac3c7a0e28938a2a2c649e6728716c013a02bf67c0913935b43584c26d203a4
- SHA512
  
  863ba28a5ad2bed1806a6b3814ea2238b06f350f48fc50ee0f161446b9dbad52761a0c9ea89b611332e7b5c3313ec3fa9ff1355b547b6169cbfd2f98d9cfb9a1
- SSDEEP
  
  3072:IJ797h5NGMhjNyHG3396HM0XUGXU2Fo21364EoiJeeI+StSqYLj8MfseRA11UO1h:q797CHenVW5GJZ2tNYLj8Mfsz4V7d0
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2