abeed55cb49cd49d14ce6c92eaa56c149faa22e8f44dfe6eec7d4e4978237f0a | Triage

Sharing

General

Target

abeed55cb49cd49d14ce6c92eaa56c149faa22e8f44dfe6eec7d4e4978237f0a
Size

237KB
Sample

221123-tcm4psgg3v
MD5

514b51cf09d1e53e517b976330f30af0
SHA1

66857dd07d2067671208ef01f6cadc21bd4941f1
SHA256

abeed55cb49cd49d14ce6c92eaa56c149faa22e8f44dfe6eec7d4e4978237f0a
SHA512

93c716d8641ba753bf5a4b2ad38a0210724c31b98f54f3c922832ad87c9631fde4302adc9a15700d24228a8a37a33347771b00dbcfee983be8da631af3e0a164
SSDEEP

3072:clELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqsnqs2PVfI2lQ4ezj:P3kOMeaavF17EP6qyqsePK2lJeT

Score

8^/10

bootkit persistence upx

Malware Config

Targets

- Target
  
  abeed55cb49cd49d14ce6c92eaa56c149faa22e8f44dfe6eec7d4e4978237f0a
- Size
  
  237KB
- MD5
  
  514b51cf09d1e53e517b976330f30af0
- SHA1
  
  66857dd07d2067671208ef01f6cadc21bd4941f1
- SHA256
  
  abeed55cb49cd49d14ce6c92eaa56c149faa22e8f44dfe6eec7d4e4978237f0a
- SHA512
  
  93c716d8641ba753bf5a4b2ad38a0210724c31b98f54f3c922832ad87c9631fde4302adc9a15700d24228a8a37a33347771b00dbcfee983be8da631af3e0a164
- SSDEEP
  
  3072:clELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqsnqs2PVfI2lQ4ezj:P3kOMeaavF17EP6qyqsePK2lJeT
Score

8^/10

bootkit persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistenceupx

behavioral2