e5f824b538525db7c379369815eebde98ecc09b6d2f0b9cf3bb73a74828aa740 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caef8de0f0a3697bac6fd8aafdc5c3a0
Size

444KB
Sample

240315-kavlbsdh88
MD5

caef8de0f0a3697bac6fd8aafdc5c3a0
SHA1

fcfca501122577ff6b48a6b31665804bf5e83980
SHA256

e5f824b538525db7c379369815eebde98ecc09b6d2f0b9cf3bb73a74828aa740
SHA512

c8fc14d7548d1a5fb7775d01cc8bd3fa6bb70a4997cc2b7903406068189eeb135fa0b8df4b00c29988d3d574f48ed59d69db8fd639f9eeee597c064901ae9618
SSDEEP

12288:DQPxa4EUP0nKMHy4LHFEmPlEomuryIOR7S+WZ:Dcx/EUcKMHyuPlEQryIW7SbZ

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  caef8de0f0a3697bac6fd8aafdc5c3a0
- Size
  
  444KB
- MD5
  
  caef8de0f0a3697bac6fd8aafdc5c3a0
- SHA1
  
  fcfca501122577ff6b48a6b31665804bf5e83980
- SHA256
  
  e5f824b538525db7c379369815eebde98ecc09b6d2f0b9cf3bb73a74828aa740
- SHA512
  
  c8fc14d7548d1a5fb7775d01cc8bd3fa6bb70a4997cc2b7903406068189eeb135fa0b8df4b00c29988d3d574f48ed59d69db8fd639f9eeee597c064901ae9618
- SSDEEP
  
  12288:DQPxa4EUP0nKMHy4LHFEmPlEomuryIOR7S+WZ:Dcx/EUcKMHyuPlEQryIW7SbZ
Score

7^/10

bootkit persistence
- Executes dropped EXE
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2