fc8dc1b07e8c1accdf5bc6c35e2cc69fe2eab65f0d9a1e78e8bfb2f96380cf35 | Triage

Sharing

General

Target

SecuriteInfo.com.Riskware.AdvancedPR.2123.1590.exe
Size

806KB
Sample

221125-q1tdvaeh9x
MD5

83f9f816c511d4f35c47efd874cc85ff
SHA1

c04bc5a015e32b66ae55e6a2fd7a00579a3e138b
SHA256

fc8dc1b07e8c1accdf5bc6c35e2cc69fe2eab65f0d9a1e78e8bfb2f96380cf35
SHA512

c4c271e15f8e23790fb3a2e2c68ed9f836b55ddcf961d5bd6c03461b7cc5b489a81561b6274f18dee8a15eb152f0deac009df756869990962444fecd3f6edf29
SSDEEP

24576:AmXrNxG/B+ir+mp3ViUEa45qGO7MP+h22h:jX2/B+BmNViXalGxG

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Riskware.AdvancedPR.2123.1590.exe
- Size
  
  806KB
- MD5
  
  83f9f816c511d4f35c47efd874cc85ff
- SHA1
  
  c04bc5a015e32b66ae55e6a2fd7a00579a3e138b
- SHA256
  
  fc8dc1b07e8c1accdf5bc6c35e2cc69fe2eab65f0d9a1e78e8bfb2f96380cf35
- SHA512
  
  c4c271e15f8e23790fb3a2e2c68ed9f836b55ddcf961d5bd6c03461b7cc5b489a81561b6274f18dee8a15eb152f0deac009df756869990962444fecd3f6edf29
- SSDEEP
  
  24576:AmXrNxG/B+ir+mp3ViUEa45qGO7MP+h22h:jX2/B+BmNViXalGxG
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2