9388296661994b856dadf96a563839040b0ee39456685a2b3f4a880f3e29a078 | Triage

Sharing

General

Target

9388296661994b856dadf96a563839040b0ee39456685a2b3f4a880f3e29a078
Size

493KB
Sample

221205-pfjs8sda6s
MD5

478d9003d522e53259e978657f46ed44
SHA1

5346a5bd0d8bf00edce370f0aebb35ca402e3c54
SHA256

9388296661994b856dadf96a563839040b0ee39456685a2b3f4a880f3e29a078
SHA512

017c072df2ada3d83ab8f4a3cc6ec65307d4fcb302916e6e859249e8b9c0acc3d9eb5373a7875d5e3f55cabf136ad8193a0bce450270caeb9a47f8f626ae4cfd
SSDEEP

12288:ipScQ8YwSG8AdVegF68XkjcxVNtTirdTG:i838PC1xKkjgTEd

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  9388296661994b856dadf96a563839040b0ee39456685a2b3f4a880f3e29a078
- Size
  
  493KB
- MD5
  
  478d9003d522e53259e978657f46ed44
- SHA1
  
  5346a5bd0d8bf00edce370f0aebb35ca402e3c54
- SHA256
  
  9388296661994b856dadf96a563839040b0ee39456685a2b3f4a880f3e29a078
- SHA512
  
  017c072df2ada3d83ab8f4a3cc6ec65307d4fcb302916e6e859249e8b9c0acc3d9eb5373a7875d5e3f55cabf136ad8193a0bce450270caeb9a47f8f626ae4cfd
- SSDEEP
  
  12288:ipScQ8YwSG8AdVegF68XkjcxVNtTirdTG:i838PC1xKkjgTEd
Score

8^/10

bootkit persistence
- Executes dropped EXE
- Deletes itself
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2