8608c1e8521df3af145b2556061a3d79b5cfe74a4c4111c83656a818f5d66f40 | Triage

Sharing

General

Target

8608c1e8521df3af145b2556061a3d79b5cfe74a4c4111c83656a818f5d66f40
Size

372KB
Sample

221204-bvbjhsab7x
MD5

1c98a83d4563755904a3b985550f8fd6
SHA1

c9dbed02c802ca059ae5a931fef059b34777c97c
SHA256

8608c1e8521df3af145b2556061a3d79b5cfe74a4c4111c83656a818f5d66f40
SHA512

93de5aa007f413a44a6e884d7b7b5ecac042e491ef8f5d17bf33c96eb0483b327143788a49dc455431a8140928404724ee7841f159f644b32bbea6a958d76518
SSDEEP

6144:XtYS6ffI73W/1RphmcbZVspZUjHy86tAe730nU0SRVCG:XtYS6ffN3PmcHsPUjHy86tAe730Kv

Score

6^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  8608c1e8521df3af145b2556061a3d79b5cfe74a4c4111c83656a818f5d66f40
- Size
  
  372KB
- MD5
  
  1c98a83d4563755904a3b985550f8fd6
- SHA1
  
  c9dbed02c802ca059ae5a931fef059b34777c97c
- SHA256
  
  8608c1e8521df3af145b2556061a3d79b5cfe74a4c4111c83656a818f5d66f40
- SHA512
  
  93de5aa007f413a44a6e884d7b7b5ecac042e491ef8f5d17bf33c96eb0483b327143788a49dc455431a8140928404724ee7841f159f644b32bbea6a958d76518
- SSDEEP
  
  6144:XtYS6ffI73W/1RphmcbZVspZUjHy86tAe730nU0SRVCG:XtYS6ffN3PmcHsPUjHy86tAe730Kv
Score

6^/10

bootkit discovery persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence