38a6fb364785e63bbc3274b8021aae60f5c9be228f3de053a1a1a76f4c4675ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38a6fb364785e63bbc3274b8021aae60f5c9be228f3de053a1a1a76f4c4675ad
Size

4.8MB
Sample

240113-1dl2csedfr
MD5

e3480240b6802a7a3c6d6e68665f7695
SHA1

eb946da686ba06fecb93b4fa60ab38a41da5d922
SHA256

38a6fb364785e63bbc3274b8021aae60f5c9be228f3de053a1a1a76f4c4675ad
SHA512

fe461f1a59f79462d45c68acab0ed56eff0d15f795d5e93306453f92b08e2aa93c005efd5b9d913ad1b2cf8f3bb2e003a09efd603dcb0f450581f05f71034a3d
SSDEEP

98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXZ:TcmZl85gyjovK65E8ob5Sx8aXZ

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  38a6fb364785e63bbc3274b8021aae60f5c9be228f3de053a1a1a76f4c4675ad
- Size
  
  4.8MB
- MD5
  
  e3480240b6802a7a3c6d6e68665f7695
- SHA1
  
  eb946da686ba06fecb93b4fa60ab38a41da5d922
- SHA256
  
  38a6fb364785e63bbc3274b8021aae60f5c9be228f3de053a1a1a76f4c4675ad
- SHA512
  
  fe461f1a59f79462d45c68acab0ed56eff0d15f795d5e93306453f92b08e2aa93c005efd5b9d913ad1b2cf8f3bb2e003a09efd603dcb0f450581f05f71034a3d
- SSDEEP
  
  98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXZ:TcmZl85gyjovK65E8ob5Sx8aXZ
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence