General

  • Target

    GLP_installer_900223150_market.exe

  • Size

    3.6MB

  • Sample

    230330-s7y9sadc57

  • MD5

    e7f4d560e7520eb427eddb72cb645344

  • SHA1

    8b9c624f90f150ea10fe5eac0d219be2d719280d

  • SHA256

    8700e903754a00c6cf444f1c437e2944d72887310c11199ccda97b0e9517a876

  • SHA512

    cfe7dfae8333d9d8320b0915abdd6d7da921c60a9d4b702568df39fc2fcac7fa1f3efe0c258d2e163a1f2b8e12426c333029eb7bbefc8e147f2c472466ed7532

  • SSDEEP

    49152:608OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB6:608vdsGaQNgS1C6e6ngKpq+

Score
8/10

Malware Config

Targets

    • Target

      GLP_installer_900223150_market.exe

    • Size

      3.6MB

    • MD5

      e7f4d560e7520eb427eddb72cb645344

    • SHA1

      8b9c624f90f150ea10fe5eac0d219be2d719280d

    • SHA256

      8700e903754a00c6cf444f1c437e2944d72887310c11199ccda97b0e9517a876

    • SHA512

      cfe7dfae8333d9d8320b0915abdd6d7da921c60a9d4b702568df39fc2fcac7fa1f3efe0c258d2e163a1f2b8e12426c333029eb7bbefc8e147f2c472466ed7532

    • SSDEEP

      49152:608OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYRMnm7LB6:608vdsGaQNgS1C6e6ngKpq+

    Score
    8/10
    • Downloads MZ/PE file

    • Loads dropped DLL

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Bootkit

1
T1067

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Tasks