394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3 | Triage

Sharing

General

Target

394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
Size

1.3MB
Sample

230404-fnt5haeg6t
MD5

05a059fdaab7e3f5190c0d410f83dbab
SHA1

b043cb3070c3f86b6c877a73ea1f24f069f0bb2f
SHA256

394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
SHA512

07fa92386a9cabb5a3db78f2feb5d9303218eddaec76e9b4d48bad85d9ae9a3b41147a2abf71ac005a2c358365596c2f5406debcec25469cccb34cd9de8a7c8d
SSDEEP

24576:5lwiv/pny32/NX/0re04fl0aPv70gLoKjVOECI/a1vEFCi0VxUHsUXzSd+P3lpe7:5+M3VPtlt+4zU2oAmuSawfwhe4tE63JE

Score

6^/10

bootkit evasion persistence trojan

Malware Config

Targets

- Target
  
  394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
- Size
  
  1.3MB
- MD5
  
  05a059fdaab7e3f5190c0d410f83dbab
- SHA1
  
  b043cb3070c3f86b6c877a73ea1f24f069f0bb2f
- SHA256
  
  394c34e88e9a1d367faee6bea55fba3e0168447fea01479a40c49df429350eb3
- SHA512
  
  07fa92386a9cabb5a3db78f2feb5d9303218eddaec76e9b4d48bad85d9ae9a3b41147a2abf71ac005a2c358365596c2f5406debcec25469cccb34cd9de8a7c8d
- SSDEEP
  
  24576:5lwiv/pny32/NX/0re04fl0aPv70gLoKjVOECI/a1vEFCi0VxUHsUXzSd+P3lpe7:5+M3VPtlt+4zU2oAmuSawfwhe4tE63JE
Score

6^/10

bootkit evasion persistence trojan
- Checks whether UAC is enabled
  evasion trojan
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitevasionpersistencetrojan

behavioral2

bootkitevasionpersistencetrojan