fd28bcdcbda6ef6518fcfa6bf76caeaa3528a46010058be7e93e1e8956b2a2f1 | Triage

Sharing

General

Target

fd28bcdcbda6ef6518fcfa6bf76caeaa3528a46010058be7e93e1e8956b2a2f1
Size

284KB
Sample

221203-zd6v4adb64
MD5

b6c34f833e1a0b3423b9ef587e083783
SHA1

7bb878aed0495501a8e82d8a96508e2f87f0d518
SHA256

fd28bcdcbda6ef6518fcfa6bf76caeaa3528a46010058be7e93e1e8956b2a2f1
SHA512

8756dbeb3f3c5d8365ac188fc203b041a5db9a9e0c9006f98b564774a0be6d1d18734f3780e58bf3da4151759ce32df56ef6b3a69cfffeb777888a2791d0b13b
SSDEEP

6144:6V/l34+YtcH/ad1zmrrvk+Zg6gBjvgpKSWJs2cVwSdEZ+bTz7BfabLW:8l34+Y+QMrvw5ZJs2+wiUefZ

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  fd28bcdcbda6ef6518fcfa6bf76caeaa3528a46010058be7e93e1e8956b2a2f1
- Size
  
  284KB
- MD5
  
  b6c34f833e1a0b3423b9ef587e083783
- SHA1
  
  7bb878aed0495501a8e82d8a96508e2f87f0d518
- SHA256
  
  fd28bcdcbda6ef6518fcfa6bf76caeaa3528a46010058be7e93e1e8956b2a2f1
- SHA512
  
  8756dbeb3f3c5d8365ac188fc203b041a5db9a9e0c9006f98b564774a0be6d1d18734f3780e58bf3da4151759ce32df56ef6b3a69cfffeb777888a2791d0b13b
- SSDEEP
  
  6144:6V/l34+YtcH/ad1zmrrvk+Zg6gBjvgpKSWJs2cVwSdEZ+bTz7BfabLW:8l34+Y+QMrvw5ZJs2+wiUefZ
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence