2036682407dda8886713645492e16afb90d16c73929ba96fe4d82db36477681b | Triage

Sharing

General

Target

GLP_installer_900223086_market.exe
Size

3.6MB
Sample

230324-2dnevsbh6w
MD5

5cdefa6986666fc708854285807d9be0
SHA1

0d716cd667bca72c800b605c5cb9e9a0d0343553
SHA256

2036682407dda8886713645492e16afb90d16c73929ba96fe4d82db36477681b
SHA512

aaf2e3933652b3f9b03a75650b377a44db97955ed49fc11d9d618ddac8d4c8198c388dd142262960cafb159d3e581139025a7969f2f16a8591afd04510673511
SSDEEP

49152:H08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LBj:H08vdsGaQNgS1C6e6ngKpq/

Score

8^/10

bootkit persistence

Malware Config

Targets

- Target
  
  GLP_installer_900223086_market.exe
- Size
  
  3.6MB
- MD5
  
  5cdefa6986666fc708854285807d9be0
- SHA1
  
  0d716cd667bca72c800b605c5cb9e9a0d0343553
- SHA256
  
  2036682407dda8886713645492e16afb90d16c73929ba96fe4d82db36477681b
- SHA512
  
  aaf2e3933652b3f9b03a75650b377a44db97955ed49fc11d9d618ddac8d4c8198c388dd142262960cafb159d3e581139025a7969f2f16a8591afd04510673511
- SSDEEP
  
  49152:H08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LBj:H08vdsGaQNgS1C6e6ngKpq/
Score

8^/10

bootkit persistence
- Downloads MZ/PE file
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence