712b2b146e4f0cb412008f703db52e6272299bb25597673075aece1ec4167e4d | Triage

Sharing

General

Target

GLP_installer_1000218456_market.exe
Size

3.6MB
Sample

230311-defjmsaa6z
MD5

ef61ca12b115d390a2971608cf462a83
SHA1

fbd0f3a9e64143952eb7d506949f4e0991269b4e
SHA256

712b2b146e4f0cb412008f703db52e6272299bb25597673075aece1ec4167e4d
SHA512

da4004dc34a608068d36c5a9b56ea44cbf79936a1fbcaed98e77079e25d9cd7ad3bb0ff983a285ab6386506df1ca58110021c306f8eeb9df107f3f702224ef0e
SSDEEP

49152:l08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB9:l08vdsGaQNgS1C6e6ngKpqh

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  GLP_installer_1000218456_market.exe
- Size
  
  3.6MB
- MD5
  
  ef61ca12b115d390a2971608cf462a83
- SHA1
  
  fbd0f3a9e64143952eb7d506949f4e0991269b4e
- SHA256
  
  712b2b146e4f0cb412008f703db52e6272299bb25597673075aece1ec4167e4d
- SHA512
  
  da4004dc34a608068d36c5a9b56ea44cbf79936a1fbcaed98e77079e25d9cd7ad3bb0ff983a285ab6386506df1ca58110021c306f8eeb9df107f3f702224ef0e
- SSDEEP
  
  49152:l08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB9:l08vdsGaQNgS1C6e6ngKpqh
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence