40b3aef4028049ea9497da345943f81c8b1dcf72aee11f3f75eb1237d5a85d54 | Triage

Sharing

General

Target

18646167397700abc18fe79563df67fa
Size

318KB
Sample

231224-26ba1aafbp
MD5

18646167397700abc18fe79563df67fa
SHA1

b053590d1136bd2a54415525afb2eda59b78bca8
SHA256

40b3aef4028049ea9497da345943f81c8b1dcf72aee11f3f75eb1237d5a85d54
SHA512

007636650d69f704d8e1d28c6a9e7b08ccd988fd9ad4bb14f866f919fa013b60467f7ef0bf9b7788f798be5f7e8d1421cc43d69031662fa891d537e40c692c8e
SSDEEP

6144:F37VFvGERZGCNtMXgCSqBG7agspoGKRmvw7pMw/Xl+Fr4vCGIoM:F7eEht4BG7a3qmo9MGwFr4qGM

Score

7^/10

bootkit persistence upx

Malware Config

Targets

- Target
  
  18646167397700abc18fe79563df67fa
- Size
  
  318KB
- MD5
  
  18646167397700abc18fe79563df67fa
- SHA1
  
  b053590d1136bd2a54415525afb2eda59b78bca8
- SHA256
  
  40b3aef4028049ea9497da345943f81c8b1dcf72aee11f3f75eb1237d5a85d54
- SHA512
  
  007636650d69f704d8e1d28c6a9e7b08ccd988fd9ad4bb14f866f919fa013b60467f7ef0bf9b7788f798be5f7e8d1421cc43d69031662fa891d537e40c692c8e
- SSDEEP
  
  6144:F37VFvGERZGCNtMXgCSqBG7agspoGKRmvw7pMw/Xl+Fr4vCGIoM:F7eEht4BG7a3qmo9MGwFr4qGM
Score

7^/10

bootkit persistence upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistenceupx

behavioral2