ca8096378833925d900d597c47bf8fce5445587831f4e7e2f7610000ec4b2215 | Triage

Sharing

General

Target

ca8096378833925d900d597c47bf8fce5445587831f4e7e2f7610000ec4b2215
Size

96KB
Sample

221205-gln15sff2y
MD5

f2b55a7f291a132ec61c0647294b4279
SHA1

9655022d4b727afc53f08e6c146e8d85213e6004
SHA256

ca8096378833925d900d597c47bf8fce5445587831f4e7e2f7610000ec4b2215
SHA512

4ea9bf425f506ec7ba585ce7335fd8cba5626f7e4bd1c45144b766173b19ffd178db966f639d7083228d6fc36b2f31f7e4daebd9e334d06253bcadd2516b5e82
SSDEEP

1536:hJvrpTppT0QYgATmN2J652j+gCEZyb/8jHFv9FlF9BFfYRKYqgnqR:njp/PE6N2JBZyL8jHL/F9BRqKY5na

Score

6^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  ca8096378833925d900d597c47bf8fce5445587831f4e7e2f7610000ec4b2215
- Size
  
  96KB
- MD5
  
  f2b55a7f291a132ec61c0647294b4279
- SHA1
  
  9655022d4b727afc53f08e6c146e8d85213e6004
- SHA256
  
  ca8096378833925d900d597c47bf8fce5445587831f4e7e2f7610000ec4b2215
- SHA512
  
  4ea9bf425f506ec7ba585ce7335fd8cba5626f7e4bd1c45144b766173b19ffd178db966f639d7083228d6fc36b2f31f7e4daebd9e334d06253bcadd2516b5e82
- SSDEEP
  
  1536:hJvrpTppT0QYgATmN2J652j+gCEZyb/8jHFv9FlF9BFfYRKYqgnqR:njp/PE6N2JBZyL8jHL/F9BRqKY5na
Score

6^/10

bootkit discovery persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2