c437346611c90ab7588afc79f0a819f900614a758a0846be978bb7caef222f52 | Triage

Sharing

General

Target

c437346611c90ab7588afc79f0a819f900614a758a0846be978bb7caef222f52
Size

3.0MB
Sample

240229-kljm7sbf6x
MD5

38d21e44c8fd5b9eb1ae599923a74eb8
SHA1

2e61851e404ea16c6f0f2bfecca90bd71f96aaa8
SHA256

c437346611c90ab7588afc79f0a819f900614a758a0846be978bb7caef222f52
SHA512

3bd8ed8b492febb47773d67f3eaf58b8fecd9b9b0958de997b1bba544c2acb11fcb9d3a55505d1326fb24e5549ccafc8fbbbdf63268365bd6de0b980683b4ac5
SSDEEP

24576:dwA7XDxCyXvdCiBlqbTwHKdCu1Dl33wb1ajC4Ky3xyuTfVHl3n:dwGDx1lOT4KdCuDHwb0X3nDbn

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  c437346611c90ab7588afc79f0a819f900614a758a0846be978bb7caef222f52
- Size
  
  3.0MB
- MD5
  
  38d21e44c8fd5b9eb1ae599923a74eb8
- SHA1
  
  2e61851e404ea16c6f0f2bfecca90bd71f96aaa8
- SHA256
  
  c437346611c90ab7588afc79f0a819f900614a758a0846be978bb7caef222f52
- SHA512
  
  3bd8ed8b492febb47773d67f3eaf58b8fecd9b9b0958de997b1bba544c2acb11fcb9d3a55505d1326fb24e5549ccafc8fbbbdf63268365bd6de0b980683b4ac5
- SSDEEP
  
  24576:dwA7XDxCyXvdCiBlqbTwHKdCu1Dl33wb1ajC4Ky3xyuTfVHl3n:dwGDx1lOT4KdCuDHwb0X3nDbn
Score

7^/10

bootkit persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence