4e9ea4f89f25d9834bcb4de4a65c73fb4189877002340df1f6f1444f9a7fe453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1035a9b0e33d6f77dbbe1434756945bb
Size

153KB
Sample

231230-gctj9sfagl
MD5

1035a9b0e33d6f77dbbe1434756945bb
SHA1

11c3cef6f0bee799370cd294415c66da10a9b517
SHA256

4e9ea4f89f25d9834bcb4de4a65c73fb4189877002340df1f6f1444f9a7fe453
SHA512

79ad161db98c83414dc68df8531dba03bda41f1190eb4fcbc16ee985de6b1aa7c10b6f8d09ce6587f789a532cf43931740b77abb1560695fdeb0612f5ee108a2
SSDEEP

3072:K8OYDA+V9RC+1QIZ6LJWbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7bxT:1OYDA+hC+Qu6LJYwvP6bQ7yMP+DE827R

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  1035a9b0e33d6f77dbbe1434756945bb
- Size
  
  153KB
- MD5
  
  1035a9b0e33d6f77dbbe1434756945bb
- SHA1
  
  11c3cef6f0bee799370cd294415c66da10a9b517
- SHA256
  
  4e9ea4f89f25d9834bcb4de4a65c73fb4189877002340df1f6f1444f9a7fe453
- SHA512
  
  79ad161db98c83414dc68df8531dba03bda41f1190eb4fcbc16ee985de6b1aa7c10b6f8d09ce6587f789a532cf43931740b77abb1560695fdeb0612f5ee108a2
- SSDEEP
  
  3072:K8OYDA+V9RC+1QIZ6LJWbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7bxT:1OYDA+hC+Qu6LJYwvP6bQ7yMP+DE827R
Score

7^/10

bootkit persistence
- Deletes itself
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2