8e765eb0f4954ead53c91abd5cbd93e8a563a05662c758735d925855ac8b8ec5 | Triage

Sharing

General

Target

8e765eb0f4954ead53c91abd5cbd93e8a563a05662c758735d925855ac8b8ec5
Size

1.6MB
Sample

230321-1z37rsfc71
MD5

064177d4fb8d8d41f6577369a3829e11
SHA1

a57fe8d4069fc95196f6c07d26bec99e7f7ef99e
SHA256

8e765eb0f4954ead53c91abd5cbd93e8a563a05662c758735d925855ac8b8ec5
SHA512

eea3eeb2d4fa8c14c31955dc154ee4e11069c011a6a9bd5c80b3a0b7167d245955ef37a45d3001954ebcdc4d3461238933ce1b65888ba900b88d73cea670472d
SSDEEP

49152:E5lfUp//wnd+VOmUYunmK4OZp+ZivsI+Kd:E5lfU5/wgVxUYnsOikI+Kd

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  8e765eb0f4954ead53c91abd5cbd93e8a563a05662c758735d925855ac8b8ec5
- Size
  
  1.6MB
- MD5
  
  064177d4fb8d8d41f6577369a3829e11
- SHA1
  
  a57fe8d4069fc95196f6c07d26bec99e7f7ef99e
- SHA256
  
  8e765eb0f4954ead53c91abd5cbd93e8a563a05662c758735d925855ac8b8ec5
- SHA512
  
  eea3eeb2d4fa8c14c31955dc154ee4e11069c011a6a9bd5c80b3a0b7167d245955ef37a45d3001954ebcdc4d3461238933ce1b65888ba900b88d73cea670472d
- SSDEEP
  
  49152:E5lfUp//wnd+VOmUYunmK4OZp+ZivsI+Kd:E5lfU5/wgVxUYnsOikI+Kd
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence