a487105f32b249faeef75b671cabf28dc46197974ef2317c7d83f317f21d858a | Triage

Sharing

General

Target

a487105f32b249faeef75b671cabf28dc46197974ef2317c7d83f317f21d858a
Size

1.4MB
Sample

221127-nyfzmahg91
MD5

26578becc2ec7383cd479e255bf77c75
SHA1

a30ea96ce7c2b66b9b68a087a36b3bb064f72263
SHA256

a487105f32b249faeef75b671cabf28dc46197974ef2317c7d83f317f21d858a
SHA512

9f201cdb3dbe8d7433280dcc1e3f39bbbd82d12df847ace035716136e5955f668c2eca980c1758755740d78229646683fab4b2f6269660e1cb16bce4d71de7dd
SSDEEP

24576:Tgh8H4PjUaWJIBRZ0fw9W/gZlc/MxxrpgKrIQHPPPmU7UNkbxVhkR9U4KZjWHDm2:Uh88vRPkg3Cerp53PHn3k3jAWHyf0l

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  a487105f32b249faeef75b671cabf28dc46197974ef2317c7d83f317f21d858a
- Size
  
  1.4MB
- MD5
  
  26578becc2ec7383cd479e255bf77c75
- SHA1
  
  a30ea96ce7c2b66b9b68a087a36b3bb064f72263
- SHA256
  
  a487105f32b249faeef75b671cabf28dc46197974ef2317c7d83f317f21d858a
- SHA512
  
  9f201cdb3dbe8d7433280dcc1e3f39bbbd82d12df847ace035716136e5955f668c2eca980c1758755740d78229646683fab4b2f6269660e1cb16bce4d71de7dd
- SSDEEP
  
  24576:Tgh8H4PjUaWJIBRZ0fw9W/gZlc/MxxrpgKrIQHPPPmU7UNkbxVhkR9U4KZjWHDm2:Uh88vRPkg3Cerp53PHn3k3jAWHyf0l
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence