9e4ead97bc01dea4219d43098916e5212120264fd60af0d2bdc3a3a268313155 | Triage

Sharing

General

Target

9e4ead97bc01dea4219d43098916e5212120264fd60af0d2bdc3a3a268313155
Size

138KB
Sample

221205-m2h3qagc6s
MD5

743f3e4ad35f4e17a9951db808954955
SHA1

6f3c61f9fc025d31689fbe179d97c7916735057c
SHA256

9e4ead97bc01dea4219d43098916e5212120264fd60af0d2bdc3a3a268313155
SHA512

3b36780759c0eb7bf011618fc46ef4beb322bf9eeddca8a42631a06443e773e6f68b4f536cf9466900c70ea33e60d817f760a88a8a0b3c3cea366c740f122384
SSDEEP

3072:VBYqATWne3lWRkNpZHPImtS5Es2K9Tbw9yDx9ZP61JN:z3Af3lsk7BPXS5Es2ATbwivZP61

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  9e4ead97bc01dea4219d43098916e5212120264fd60af0d2bdc3a3a268313155
- Size
  
  138KB
- MD5
  
  743f3e4ad35f4e17a9951db808954955
- SHA1
  
  6f3c61f9fc025d31689fbe179d97c7916735057c
- SHA256
  
  9e4ead97bc01dea4219d43098916e5212120264fd60af0d2bdc3a3a268313155
- SHA512
  
  3b36780759c0eb7bf011618fc46ef4beb322bf9eeddca8a42631a06443e773e6f68b4f536cf9466900c70ea33e60d817f760a88a8a0b3c3cea366c740f122384
- SSDEEP
  
  3072:VBYqATWne3lWRkNpZHPImtS5Es2K9Tbw9yDx9ZP61JN:z3Af3lsk7BPXS5Es2ATbwivZP61
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Deletes itself
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2