f4eed5663ed0c3adbd4699ee0391e32b30214686450048d07815aea6e83f24b2 | Triage

Sharing

General

Target

f4eed5663ed0c3adbd4699ee0391e32b30214686450048d07815aea6e83f24b2
Size

7.7MB
Sample

221123-z5218aee69
MD5

2d43c0106e949e4eac945f5f0f3251c3
SHA1

4b3dfcf823efa8456aebc4edfa93b3990116a37f
SHA256

f4eed5663ed0c3adbd4699ee0391e32b30214686450048d07815aea6e83f24b2
SHA512

783094638e40f57b6fe84ab6f55f91bd2fb1bb68794707639424bd359e2d925b4e4b78d4d2f2930851dae707f3b77a0c3d405aab279c9b2289ffacb97c8cfea4
SSDEEP

196608:drgJGjqMEnMgvs/s7veVyzXC3xU8gM9pDEnc2yXnB967Uf:GJJMUMgveszeVwaf/XB967Uf

Score

9^/10

bootkit persistence

Malware Config

Targets

- Target
  
  f4eed5663ed0c3adbd4699ee0391e32b30214686450048d07815aea6e83f24b2
- Size
  
  7.7MB
- MD5
  
  2d43c0106e949e4eac945f5f0f3251c3
- SHA1
  
  4b3dfcf823efa8456aebc4edfa93b3990116a37f
- SHA256
  
  f4eed5663ed0c3adbd4699ee0391e32b30214686450048d07815aea6e83f24b2
- SHA512
  
  783094638e40f57b6fe84ab6f55f91bd2fb1bb68794707639424bd359e2d925b4e4b78d4d2f2930851dae707f3b77a0c3d405aab279c9b2289ffacb97c8cfea4
- SSDEEP
  
  196608:drgJGjqMEnMgvs/s7veVyzXC3xU8gM9pDEnc2yXnB967Uf:GJJMUMgveszeVwaf/XB967Uf
Score

9^/10

bootkit persistence
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence