efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4 | Triage

Sharing

General

Target

efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
Size

301KB
Sample

221203-nkngjsfa64
MD5

04b1057e2795043a6a7681ac951c6506
SHA1

a174173bc54629f7a9d8972dfc0731c1e7916d3b
SHA256

efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
SHA512

6491d63b64f42f2161ab17f3508f4344cbb7bb556030c4ac9301b1bbae6239581d197a7ad3377ab1949d95480f0c950e03ca14061ce5ca89a07d2cc3762ac77f
SSDEEP

6144:eMghXT2rtzWLM4DCAgdCNh4rhJBiWSnG85jI4:e7wyEdCD4rBSnGY

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
- Size
  
  301KB
- MD5
  
  04b1057e2795043a6a7681ac951c6506
- SHA1
  
  a174173bc54629f7a9d8972dfc0731c1e7916d3b
- SHA256
  
  efe12ca831e2a03ae54e76c73b0de07a1818002636df11bbda431b747541f1a4
- SHA512
  
  6491d63b64f42f2161ab17f3508f4344cbb7bb556030c4ac9301b1bbae6239581d197a7ad3377ab1949d95480f0c950e03ca14061ce5ca89a07d2cc3762ac77f
- SSDEEP
  
  6144:eMghXT2rtzWLM4DCAgdCNh4rhJBiWSnG85jI4:e7wyEdCD4rBSnGY
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2