5a0855cf69ff36ed0555f70bca9ad59c60339a863189d4f3c04895257e5f9b63 | Triage

Sharing

General

Target

5a0855cf69ff36ed0555f70bca9ad59c60339a863189d4f3c04895257e5f9b63
Size

4.8MB
Sample

240524-eevh8scb27
MD5

c274dab523eb07313a2183c31d88b818
SHA1

95e494189beb8cb2419c5c20bb0b65706e79e884
SHA256

5a0855cf69ff36ed0555f70bca9ad59c60339a863189d4f3c04895257e5f9b63
SHA512

a3a22181a3c6ffebb1230f3f61a3a967302c6002a599ecc0cab54d87c62a14d739db7c7bb3b6ec0332762e796182392d8fe69a737c44926aace691e4f9df5d0f
SSDEEP

98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXs:TcmZl85gyjovK65E8ob5Sx8aXs

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  5a0855cf69ff36ed0555f70bca9ad59c60339a863189d4f3c04895257e5f9b63
- Size
  
  4.8MB
- MD5
  
  c274dab523eb07313a2183c31d88b818
- SHA1
  
  95e494189beb8cb2419c5c20bb0b65706e79e884
- SHA256
  
  5a0855cf69ff36ed0555f70bca9ad59c60339a863189d4f3c04895257e5f9b63
- SHA512
  
  a3a22181a3c6ffebb1230f3f61a3a967302c6002a599ecc0cab54d87c62a14d739db7c7bb3b6ec0332762e796182392d8fe69a737c44926aace691e4f9df5d0f
- SSDEEP
  
  98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXs:TcmZl85gyjovK65E8ob5Sx8aXs
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence