c451a6d173831b920ead395689ad90dfd397abb082535c72e4176af9a7eb576e | Triage

Sharing

General

Target

c451a6d173831b920ead395689ad90dfd397abb082535c72e4176af9a7eb576e
Size

226KB
Sample

221123-lzd6baga7w
MD5

0d9be9a0347fa5660515832b75cef4ab
SHA1

4c157696e26cdfb302a7b92ac6f2e3d06a425540
SHA256

c451a6d173831b920ead395689ad90dfd397abb082535c72e4176af9a7eb576e
SHA512

4eacb3f82a9ff17742af46a9ec56d4552e7649e01290812ab41d36e4131cdc2054a4abce70f37c0b2d504c0a453893e51301c0b71fda2882440db681d4d1d4dd
SSDEEP

6144:vUt5tIAM25GTqY91lOiPAdjDmeDmpjp6wQfLieA9OR2:MRM2kT1KmAxDG6xLfA9O

Score

8^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  c451a6d173831b920ead395689ad90dfd397abb082535c72e4176af9a7eb576e
- Size
  
  226KB
- MD5
  
  0d9be9a0347fa5660515832b75cef4ab
- SHA1
  
  4c157696e26cdfb302a7b92ac6f2e3d06a425540
- SHA256
  
  c451a6d173831b920ead395689ad90dfd397abb082535c72e4176af9a7eb576e
- SHA512
  
  4eacb3f82a9ff17742af46a9ec56d4552e7649e01290812ab41d36e4131cdc2054a4abce70f37c0b2d504c0a453893e51301c0b71fda2882440db681d4d1d4dd
- SSDEEP
  
  6144:vUt5tIAM25GTqY91lOiPAdjDmeDmpjp6wQfLieA9OR2:MRM2kT1KmAxDG6xLfA9O
Score

8^/10

bootkit discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence