845f86a5cd28446fc64d66e134a36182d49326686eee64aa6a0131f36d51aaab | Triage

Sharing

General

Target

845f86a5cd28446fc64d66e134a36182d49326686eee64aa6a0131f36d51aaab
Size

609KB
Sample

221125-jdnrhsbb87
MD5

a79bcc830c8a002cd5f71abf9edbff95
SHA1

4c4846f81fd2b5758c81e7715d46d053cd5fa512
SHA256

845f86a5cd28446fc64d66e134a36182d49326686eee64aa6a0131f36d51aaab
SHA512

c233a41bee6ced3995380e13c4d7f39436465a479924644c5cf2c7e7a5f31d9c8928388d380844d507666237bb4fc387bffe4415b24f5a457ad06ffff46f214b
SSDEEP

12288:uwu0R1wMbuUgn9iB4bva3ImroWiMUIzx:PwMhg8ub0ImcWNUG

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  845f86a5cd28446fc64d66e134a36182d49326686eee64aa6a0131f36d51aaab
- Size
  
  609KB
- MD5
  
  a79bcc830c8a002cd5f71abf9edbff95
- SHA1
  
  4c4846f81fd2b5758c81e7715d46d053cd5fa512
- SHA256
  
  845f86a5cd28446fc64d66e134a36182d49326686eee64aa6a0131f36d51aaab
- SHA512
  
  c233a41bee6ced3995380e13c4d7f39436465a479924644c5cf2c7e7a5f31d9c8928388d380844d507666237bb4fc387bffe4415b24f5a457ad06ffff46f214b
- SSDEEP
  
  12288:uwu0R1wMbuUgn9iB4bva3ImroWiMUIzx:PwMhg8ub0ImcWNUG
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2