8700e903754a00c6cf444f1c437e2944d72887310c11199ccda97b0e9517a876 | Triage

Sharing

General

Target

GLP_installer_900223150_market.exe
Size

3.6MB
Sample

230311-fxwppaad7y
MD5

e7f4d560e7520eb427eddb72cb645344
SHA1

8b9c624f90f150ea10fe5eac0d219be2d719280d
SHA256

8700e903754a00c6cf444f1c437e2944d72887310c11199ccda97b0e9517a876
SHA512

cfe7dfae8333d9d8320b0915abdd6d7da921c60a9d4b702568df39fc2fcac7fa1f3efe0c258d2e163a1f2b8e12426c333029eb7bbefc8e147f2c472466ed7532
SSDEEP

49152:608OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB6:608vdsGaQNgS1C6e6ngKpq+

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  GLP_installer_900223150_market.exe
- Size
  
  3.6MB
- MD5
  
  e7f4d560e7520eb427eddb72cb645344
- SHA1
  
  8b9c624f90f150ea10fe5eac0d219be2d719280d
- SHA256
  
  8700e903754a00c6cf444f1c437e2944d72887310c11199ccda97b0e9517a876
- SHA512
  
  cfe7dfae8333d9d8320b0915abdd6d7da921c60a9d4b702568df39fc2fcac7fa1f3efe0c258d2e163a1f2b8e12426c333029eb7bbefc8e147f2c472466ed7532
- SSDEEP
  
  49152:608OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB6:608vdsGaQNgS1C6e6ngKpq+
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence