Overview

overview

7

Static

static

1

sample.html

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sample

  • Size

    19KB

  • Sample

    240526-n9f4rsbe76

  • MD5

    83e2e4c63895e394872f66ccffeb9e4c

  • SHA1

    a9e5a086e22aedf4891803089df832a22485cfd5

  • SHA256

    2ae89d0bcbbfe2480e7821d0798dcc19fcf0071d3e1a0d8df3f5620a7be3071b

  • SHA512

    e04f9ca1263a3eaa99f258c72e4ddc6c74bb7b564c83698a7092114905c91e096e0c250c08b91d337149daa5a7efe3f989f4a8e5753b91050041743142198ba4

  • SSDEEP

    384:rer7DpmReVoOs4Ji9ylKeGM5U8HhhbFWU7Go2paWhOwob0O+uIJCgMmV6:rer7BVoOs4JmyI1MtBhbUC/WhOwob0jg

Score
7/10
bootkitpersistence

Malware Config

Targets

    • Target

      sample

    • Size

      19KB

    • MD5

      83e2e4c63895e394872f66ccffeb9e4c

    • SHA1

      a9e5a086e22aedf4891803089df832a22485cfd5

    • SHA256

      2ae89d0bcbbfe2480e7821d0798dcc19fcf0071d3e1a0d8df3f5620a7be3071b

    • SHA512

      e04f9ca1263a3eaa99f258c72e4ddc6c74bb7b564c83698a7092114905c91e096e0c250c08b91d337149daa5a7efe3f989f4a8e5753b91050041743142198ba4

    • SSDEEP

      384:rer7DpmReVoOs4Ji9ylKeGM5U8HhhbFWU7Go2paWhOwob0O+uIJCgMmV6:rer7BVoOs4JmyI1MtBhbUC/WhOwob0jg

    Score
    7/10
    bootkitpersistence

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Defense Evasion

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Modify Registry

1
T1112

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks