e36a724b91f0413fe07aed3c572a9084ba14811d339e8d312432bf11258926b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.Win32.TrojanX-gen.12542.9710
Size

590KB
Sample

240118-lqwn1ahacn
MD5

f08e702a47af088a494a1954c721e44c
SHA1

b9055d98e275ac990b0d2e269f6b4e1eb79847c2
SHA256

e36a724b91f0413fe07aed3c572a9084ba14811d339e8d312432bf11258926b9
SHA512

48f3a5403b3b76089e8bd82b3986d758f3cf70103b69510d20f24ae56e4b5025e089de4f6e06207bd09213e4ef543beca68d9ca2afeea8d620f01efff857038b
SSDEEP

12288:Ni/dmN0+vr3lloV0PArCRgfR8nh1Ry13dz4HfujotZg4Ea:g/ENbvrVJArCRgfeh3cz4Hbu4

Score

6^/10

bootkit persistence

Malware Config

Targets

- Target
  
  SecuriteInfo.com.Win32.TrojanX-gen.12542.9710
- Size
  
  590KB
- MD5
  
  f08e702a47af088a494a1954c721e44c
- SHA1
  
  b9055d98e275ac990b0d2e269f6b4e1eb79847c2
- SHA256
  
  e36a724b91f0413fe07aed3c572a9084ba14811d339e8d312432bf11258926b9
- SHA512
  
  48f3a5403b3b76089e8bd82b3986d758f3cf70103b69510d20f24ae56e4b5025e089de4f6e06207bd09213e4ef543beca68d9ca2afeea8d620f01efff857038b
- SSDEEP
  
  12288:Ni/dmN0+vr3lloV0PArCRgfR8nh1Ry13dz4HfujotZg4Ea:g/ENbvrVJArCRgfeh3cz4Hbu4
Score

6^/10

bootkit persistence
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence