6544118830e6ff6143dad5f2211b41497270f109232437512bb66626c8b96af0 | Triage

Sharing

General

Target

7bd2f6cdefbe68f19ca2c1ef51ef123b
Size

366KB
Sample

240128-b4b7eagfe2
MD5

7bd2f6cdefbe68f19ca2c1ef51ef123b
SHA1

5aaaea86e6c8c293a8b43608fe78c4cdf12d1fd8
SHA256

6544118830e6ff6143dad5f2211b41497270f109232437512bb66626c8b96af0
SHA512

e11859897660ce96314e4f6924c66db74693c4232f2a04b06aa386103297217ea84760b90fed455500581ae5c5bd26fe044d3453ea31bfdc497d8c60fc953100
SSDEEP

6144:Nd8tdJzSxgZkAy4zN7fJjBSAuoYxdbeomzVQUgSRBWSwvP6bQ7yMP+DE827NXN:N44ajyCfJN+oYxBez5QU1u6b7MP+Dd2H

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  7bd2f6cdefbe68f19ca2c1ef51ef123b
- Size
  
  366KB
- MD5
  
  7bd2f6cdefbe68f19ca2c1ef51ef123b
- SHA1
  
  5aaaea86e6c8c293a8b43608fe78c4cdf12d1fd8
- SHA256
  
  6544118830e6ff6143dad5f2211b41497270f109232437512bb66626c8b96af0
- SHA512
  
  e11859897660ce96314e4f6924c66db74693c4232f2a04b06aa386103297217ea84760b90fed455500581ae5c5bd26fe044d3453ea31bfdc497d8c60fc953100
- SSDEEP
  
  6144:Nd8tdJzSxgZkAy4zN7fJjBSAuoYxdbeomzVQUgSRBWSwvP6bQ7yMP+DE827NXN:N44ajyCfJN+oYxBez5QU1u6b7MP+Dd2H
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2