e76fd13e0c13f3bf664941314b483e4d42d16a158c936952cc58affa2c17059c | Triage

Sharing

General

Target

002861ccdfb512ef404a945db6447fcf
Size

954KB
Sample

231224-rktv4sfaa8
MD5

002861ccdfb512ef404a945db6447fcf
SHA1

633d4e8a0ce38b51feb830c398110d18b3a64721
SHA256

e76fd13e0c13f3bf664941314b483e4d42d16a158c936952cc58affa2c17059c
SHA512

e8896e8dc07be99d8351f8e59ce6ef4874df6b944f022b0b918d7bf6b4693232312efd6123bb834128ca23634872dd0f31f3f1a7d73be78cc1f2c5f5735591b0
SSDEEP

24576:gy91Ecn8uOA9Y53v0jMxmxgMNsAgji4GRDX1rQ6kF+o1ca+Nq:/HEkV/gxmWMaAgrcDlrQ6kIo1c

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  002861ccdfb512ef404a945db6447fcf
- Size
  
  954KB
- MD5
  
  002861ccdfb512ef404a945db6447fcf
- SHA1
  
  633d4e8a0ce38b51feb830c398110d18b3a64721
- SHA256
  
  e76fd13e0c13f3bf664941314b483e4d42d16a158c936952cc58affa2c17059c
- SHA512
  
  e8896e8dc07be99d8351f8e59ce6ef4874df6b944f022b0b918d7bf6b4693232312efd6123bb834128ca23634872dd0f31f3f1a7d73be78cc1f2c5f5735591b0
- SSDEEP
  
  24576:gy91Ecn8uOA9Y53v0jMxmxgMNsAgji4GRDX1rQ6kF+o1ca+Nq:/HEkV/gxmWMaAgrcDlrQ6kIo1c
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence