a8b8ddf49b38428a4347ff25c1a0f2bfab599ea42b486a9f178f9d2cb5f4a52d | Triage

Sharing

General

Target

a8b8ddf49b38428a4347ff25c1a0f2bfab599ea42b486a9f178f9d2cb5f4a52d
Size

3.4MB
Sample

230601-nmdecsea72
MD5

f3b44a15647f1ffc10537dff232ac69e
SHA1

4775c2d2e18faba564d184d0fcba6943f6113bb6
SHA256

a8b8ddf49b38428a4347ff25c1a0f2bfab599ea42b486a9f178f9d2cb5f4a52d
SHA512

de07ff7a72b458888a14bfe7bd6cd4cdde855f4917f5623c905f0a6cc680dec169a189f20cceb6e1112e0752fb1b07d44ac1e88771e72080356ee39c1c9380ca
SSDEEP

49152:eodMpdZGgwXKq3dL+WeEbaxJAtoJyWD9sjG092AoLtHe5XN5zbsPDBTusUkOGqsa:eomddzCdVeEeJAtg+T5irqdIYqZU

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  a8b8ddf49b38428a4347ff25c1a0f2bfab599ea42b486a9f178f9d2cb5f4a52d
- Size
  
  3.4MB
- MD5
  
  f3b44a15647f1ffc10537dff232ac69e
- SHA1
  
  4775c2d2e18faba564d184d0fcba6943f6113bb6
- SHA256
  
  a8b8ddf49b38428a4347ff25c1a0f2bfab599ea42b486a9f178f9d2cb5f4a52d
- SHA512
  
  de07ff7a72b458888a14bfe7bd6cd4cdde855f4917f5623c905f0a6cc680dec169a189f20cceb6e1112e0752fb1b07d44ac1e88771e72080356ee39c1c9380ca
- SSDEEP
  
  49152:eodMpdZGgwXKq3dL+WeEbaxJAtoJyWD9sjG092AoLtHe5XN5zbsPDBTusUkOGqsa:eomddzCdVeEeJAtg+T5irqdIYqZU
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence