0ca2bc950e41335dac0418f89d05f133934822f60b9d5353405b70f2c718427f | Triage

Sharing

General

Target

0ca2bc950e41335dac0418f89d05f133934822f60b9d5353405b70f2c718427f
Size

468KB
Sample

221030-x55q1afeb5
MD5

8272ecc7bce64a3b305d0960a36ba840
SHA1

e9d61e2a2c95c2e2e6489fccc70ac3bb33bec34f
SHA256

0ca2bc950e41335dac0418f89d05f133934822f60b9d5353405b70f2c718427f
SHA512

29ea5fdb3d1050066b5a13b1fad3d94a1c6506731a6ce2a1e3af11f16b4c1eeafe8b2f1a9e50625e31402f94a67b1a2fb872a6552898dade16d75fb79966bc16
SSDEEP

12288:bb7jkD3v0VBRxE5MBGlcM7UdTMl7UZWG1j3FLiUhf:bb3w3v8BRqEM7Ud0U1j35iI

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  0ca2bc950e41335dac0418f89d05f133934822f60b9d5353405b70f2c718427f
- Size
  
  468KB
- MD5
  
  8272ecc7bce64a3b305d0960a36ba840
- SHA1
  
  e9d61e2a2c95c2e2e6489fccc70ac3bb33bec34f
- SHA256
  
  0ca2bc950e41335dac0418f89d05f133934822f60b9d5353405b70f2c718427f
- SHA512
  
  29ea5fdb3d1050066b5a13b1fad3d94a1c6506731a6ce2a1e3af11f16b4c1eeafe8b2f1a9e50625e31402f94a67b1a2fb872a6552898dade16d75fb79966bc16
- SSDEEP
  
  12288:bb7jkD3v0VBRxE5MBGlcM7UdTMl7UZWG1j3FLiUhf:bb3w3v8BRqEM7Ud0U1j35iI
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Deletes itself
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2