bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e | Triage

Sharing

General

Target

bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
Size

348KB
Sample

221203-g1sb4seh3z
MD5

93130ffbb52ddd551dc5b0204792696e
SHA1

6423ca9fcdaf040656de35fcc20b939ec9531964
SHA256

bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
SHA512

5127828a56e8841e40b27626dc965b3511ca587060f9f82bd5d7138c8a3ea9d012bffd685acff7375090c401ff28a298afb4d82234fe12c10542b9bbc99cad94
SSDEEP

6144:6dNafzK0YNeIbBsM/LD/DnEH52bCFDMWFM1Y7FYG/rHz/HxiZM:lQeiGUwH8WDMWF9FYc//ROM

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
- Size
  
  348KB
- MD5
  
  93130ffbb52ddd551dc5b0204792696e
- SHA1
  
  6423ca9fcdaf040656de35fcc20b939ec9531964
- SHA256
  
  bc5e603aab67cbd702053ef1fe0304e17e3d7dfce410909f62884e29f02fea6e
- SHA512
  
  5127828a56e8841e40b27626dc965b3511ca587060f9f82bd5d7138c8a3ea9d012bffd685acff7375090c401ff28a298afb4d82234fe12c10542b9bbc99cad94
- SSDEEP
  
  6144:6dNafzK0YNeIbBsM/LD/DnEH52bCFDMWFM1Y7FYG/rHz/HxiZM:lQeiGUwH8WDMWF9FYc//ROM
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2