8ba7d0adb180615be8923a26b3c3259201a73f0cb70b62f38c2d43445c2e8307 | Triage

Sharing

General

Target

8533ca3518ee06d6219f7eaa43a2cbb8
Size

79KB
Sample

231222-mlafmsaaf6
MD5

8533ca3518ee06d6219f7eaa43a2cbb8
SHA1

b9a231ca235c7eb57d9a6e0a3d47680d291cf355
SHA256

8ba7d0adb180615be8923a26b3c3259201a73f0cb70b62f38c2d43445c2e8307
SHA512

8fb61a514df985b1eb4b5e6960782d2adb763079c61a71efd6a8eeea8a7fe6332f90b392bee3a6a5ebe7a9a2f74349b3b7146131546f40971a1bb1e16aa3a887
SSDEEP

1536:C+T052SRYaNRyGVxxsErecOUGKqPamrzHk:OYCTfskecOJvPrE

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  8533ca3518ee06d6219f7eaa43a2cbb8
- Size
  
  79KB
- MD5
  
  8533ca3518ee06d6219f7eaa43a2cbb8
- SHA1
  
  b9a231ca235c7eb57d9a6e0a3d47680d291cf355
- SHA256
  
  8ba7d0adb180615be8923a26b3c3259201a73f0cb70b62f38c2d43445c2e8307
- SHA512
  
  8fb61a514df985b1eb4b5e6960782d2adb763079c61a71efd6a8eeea8a7fe6332f90b392bee3a6a5ebe7a9a2f74349b3b7146131546f40971a1bb1e16aa3a887
- SSDEEP
  
  1536:C+T052SRYaNRyGVxxsErecOUGKqPamrzHk:OYCTfskecOJvPrE
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence