b33d0ecfe3becde2f0bc188b42d0766eaf96de4c6cdd752f64192a04c4e309af | Triage

Sharing

General

Target

42bd09ef5ed2e3f7851704ef5956a049
Size

116KB
Sample

240105-ewx1paagg9
MD5

42bd09ef5ed2e3f7851704ef5956a049
SHA1

d6d2e2d450505fea86b73affc33304c2ba0dc797
SHA256

b33d0ecfe3becde2f0bc188b42d0766eaf96de4c6cdd752f64192a04c4e309af
SHA512

7440a8ce66339077d492d9b24e2a21da5f1d318167d72a25b9d7db1963a23cdc54666e079bf69ca73da0fd9573ae216aa853f5232a089bf2a6f2edffed1c7c7e
SSDEEP

3072:9sQJUy4HKKbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7DLhE3y:9sgR4q0wvP6bQ7yMP+DE827DLb

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  42bd09ef5ed2e3f7851704ef5956a049
- Size
  
  116KB
- MD5
  
  42bd09ef5ed2e3f7851704ef5956a049
- SHA1
  
  d6d2e2d450505fea86b73affc33304c2ba0dc797
- SHA256
  
  b33d0ecfe3becde2f0bc188b42d0766eaf96de4c6cdd752f64192a04c4e309af
- SHA512
  
  7440a8ce66339077d492d9b24e2a21da5f1d318167d72a25b9d7db1963a23cdc54666e079bf69ca73da0fd9573ae216aa853f5232a089bf2a6f2edffed1c7c7e
- SSDEEP
  
  3072:9sQJUy4HKKbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7DLhE3y:9sgR4q0wvP6bQ7yMP+DE827DLb
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2