6eee1daba1ad762a727a4cc9dbaca0f72f096dc4806816636e46de7080bfbf32 | Triage

Sharing

General

Target

6eee1daba1ad762a727a4cc9dbaca0f72f096dc4806816636e46de7080bfbf32
Size

4.8MB
Sample

240522-2bn9dabc64
MD5

0b14c77df1aea308c6d3ae52d048e035
SHA1

db65fe00fd007b1cf6532095ffc6a65fcdfdd9a5
SHA256

6eee1daba1ad762a727a4cc9dbaca0f72f096dc4806816636e46de7080bfbf32
SHA512

21b618520e562a97b95019f1c561ba58554b505f538a91a21eb49bfb64913c86cef831f5852701c20a4079a1969947d02dd520062175f3e72b351c8577430ed1
SSDEEP

98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aX6:TcmZl85gyjovK65E8ob5Sx8aX6

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  6eee1daba1ad762a727a4cc9dbaca0f72f096dc4806816636e46de7080bfbf32
- Size
  
  4.8MB
- MD5
  
  0b14c77df1aea308c6d3ae52d048e035
- SHA1
  
  db65fe00fd007b1cf6532095ffc6a65fcdfdd9a5
- SHA256
  
  6eee1daba1ad762a727a4cc9dbaca0f72f096dc4806816636e46de7080bfbf32
- SHA512
  
  21b618520e562a97b95019f1c561ba58554b505f538a91a21eb49bfb64913c86cef831f5852701c20a4079a1969947d02dd520062175f3e72b351c8577430ed1
- SSDEEP
  
  98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aX6:TcmZl85gyjovK65E8ob5Sx8aX6
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence