41d3c6bd3ce9f01f49f53ae5ef03c1d583b556e8327a4c6c27148809564738a2 | Triage

Sharing

General

Target

41d3c6bd3ce9f01f49f53ae5ef03c1d583b556e8327a4c6c27148809564738a2
Size

5.0MB
Sample

230325-ewm6gsdc3s
MD5

1fcba4d5ff5a918c1cca93ff8f449891
SHA1

9ed7b9d33ac666ef65a295bc08ba35a04f7c1f2b
SHA256

41d3c6bd3ce9f01f49f53ae5ef03c1d583b556e8327a4c6c27148809564738a2
SHA512

bffd35f0d3b990d8baf94178c11a927e5f479fcf302ed19c1c7015f25de9e7ae677d2167a462534a2994a932be6feae137a48e3acd8ced66fd01a04c00f081bf
SSDEEP

98304:KbSpmrmc2lAu88lkcf5YjovKqGYiOE8oLj5aI/fSyo8aXmE/n:ELmZlq5gyjovK65E8olnSx8aXb/n

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  41d3c6bd3ce9f01f49f53ae5ef03c1d583b556e8327a4c6c27148809564738a2
- Size
  
  5.0MB
- MD5
  
  1fcba4d5ff5a918c1cca93ff8f449891
- SHA1
  
  9ed7b9d33ac666ef65a295bc08ba35a04f7c1f2b
- SHA256
  
  41d3c6bd3ce9f01f49f53ae5ef03c1d583b556e8327a4c6c27148809564738a2
- SHA512
  
  bffd35f0d3b990d8baf94178c11a927e5f479fcf302ed19c1c7015f25de9e7ae677d2167a462534a2994a932be6feae137a48e3acd8ced66fd01a04c00f081bf
- SSDEEP
  
  98304:KbSpmrmc2lAu88lkcf5YjovKqGYiOE8oLj5aI/fSyo8aXmE/n:ELmZlq5gyjovK65E8olnSx8aXb/n
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence