efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849 | Triage

Sharing

General

Target

efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
Size

536KB
Sample

221206-gqggvsae69
MD5

092fbe119af659bc1634cb3d79f94509
SHA1

1077b24731f26e1452b582ef9051537ea4bf7c6a
SHA256

efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
SHA512

0d2fff764acb7f261d8e22d823d75b6d070746970e357f09056e41a333d9b44b42f7f00235d160606a6be415e0dd077ecd7443e115d4f8e223698b525db422b3
SSDEEP

6144:e/IRL3N/LoBZEPrfwf7VcCvpICvHHnlhWzxwgIJPLNGTfKe8i/q4k2JgLKQc0:e/IRBLoBArIJoxwgIJPLNYPvk2FD0

Score

8^/10

bootkit persistence upx

Malware Config

Targets

- Target
  
  efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
- Size
  
  536KB
- MD5
  
  092fbe119af659bc1634cb3d79f94509
- SHA1
  
  1077b24731f26e1452b582ef9051537ea4bf7c6a
- SHA256
  
  efe11717d058562a7cacf0aea0f919d0b36d0686967a6ba3f2059785bf9f9849
- SHA512
  
  0d2fff764acb7f261d8e22d823d75b6d070746970e357f09056e41a333d9b44b42f7f00235d160606a6be415e0dd077ecd7443e115d4f8e223698b525db422b3
- SSDEEP
  
  6144:e/IRL3N/LoBZEPrfwf7VcCvpICvHHnlhWzxwgIJPLNGTfKe8i/q4k2JgLKQc0:e/IRBLoBArIJoxwgIJPLNYPvk2FD0
Score

8^/10

bootkit persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistenceupx

behavioral2

bootkitpersistenceupx