e8103caeb1c26312ad152d4d3d8ad010fc8ee09b7b29b04741fe010ab26af1af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4de47e8f3950e2f1f541816ee9fa7d78
Size

188KB
Sample

231226-dbn2lsbcap
MD5

4de47e8f3950e2f1f541816ee9fa7d78
SHA1

0f1ec5e5eaca770a5c464470ac0c1519c35b5a11
SHA256

e8103caeb1c26312ad152d4d3d8ad010fc8ee09b7b29b04741fe010ab26af1af
SHA512

d4854c8f4b3cf8d5a3eb082d21f9168caf1add22bba440b3b48763da51a91fc7517dad34f2b46ba83af5ef09bca45d0673e8c3afe3fb3a81c4a4e9f5370334e0
SSDEEP

3072:GJGVBUt/83TqrskH8Y9SjDVYJIPB4gyD0W5j6ZLB7S:G7/aTqrsM8nVCnDziL

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  4de47e8f3950e2f1f541816ee9fa7d78
- Size
  
  188KB
- MD5
  
  4de47e8f3950e2f1f541816ee9fa7d78
- SHA1
  
  0f1ec5e5eaca770a5c464470ac0c1519c35b5a11
- SHA256
  
  e8103caeb1c26312ad152d4d3d8ad010fc8ee09b7b29b04741fe010ab26af1af
- SHA512
  
  d4854c8f4b3cf8d5a3eb082d21f9168caf1add22bba440b3b48763da51a91fc7517dad34f2b46ba83af5ef09bca45d0673e8c3afe3fb3a81c4a4e9f5370334e0
- SSDEEP
  
  3072:GJGVBUt/83TqrskH8Y9SjDVYJIPB4gyD0W5j6ZLB7S:G7/aTqrsM8nVCnDziL
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence