fc21f614e6fed1808bbf3a0510ba093e9861688183818ba09319b2c0802d6cdf | Triage

Sharing

General

Target

fc21f614e6fed1808bbf3a0510ba093e9861688183818ba09319b2c0802d6cdf
Size

6.5MB
Sample

240419-y4c52aee45
MD5

888a9d654d30c7e025f9be07ce6e8234
SHA1

8a1771c7e670eb4fe2bd8552091dbfccc86fd129
SHA256

fc21f614e6fed1808bbf3a0510ba093e9861688183818ba09319b2c0802d6cdf
SHA512

0483116e7536877b2bf47b10b08e102af6e4b789da7b612a0bb2eb8c564008b7d84676896fb11bf5bc6ee2b6a9b0dcd2e902b404d9152d3eb7d51d7c8234cd25
SSDEEP

98304:J08vdsGaQNgS1C6e8nKpIkboG79rbonZP3Oq4xqYRwirGLqt:J0HwdT8bJR8n0P0WHMqt

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  fc21f614e6fed1808bbf3a0510ba093e9861688183818ba09319b2c0802d6cdf
- Size
  
  6.5MB
- MD5
  
  888a9d654d30c7e025f9be07ce6e8234
- SHA1
  
  8a1771c7e670eb4fe2bd8552091dbfccc86fd129
- SHA256
  
  fc21f614e6fed1808bbf3a0510ba093e9861688183818ba09319b2c0802d6cdf
- SHA512
  
  0483116e7536877b2bf47b10b08e102af6e4b789da7b612a0bb2eb8c564008b7d84676896fb11bf5bc6ee2b6a9b0dcd2e902b404d9152d3eb7d51d7c8234cd25
- SSDEEP
  
  98304:J08vdsGaQNgS1C6e8nKpIkboG79rbonZP3Oq4xqYRwirGLqt:J0HwdT8bJR8n0P0WHMqt
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence