569310df2543c80b9c500c8527ba9352bc384dbd5b5f6b59457d81e1b2cc62f3 | Triage

Sharing

General

Target

569310df2543c80b9c500c8527ba9352bc384dbd5b5f6b59457d81e1b2cc62f3
Size

4.8MB
Sample

240526-yn2tfsaa4v
MD5

dac15f8b54b80d14c6d906a4b7a98835
SHA1

da51b337f8cb75f425719a791d491d220019b9bc
SHA256

569310df2543c80b9c500c8527ba9352bc384dbd5b5f6b59457d81e1b2cc62f3
SHA512

2e1f9df9c2f7f225e380ff046574fc16d30956a129eaf774f1916c3ceea8862082681a42e31c71a6489a272625328bc8a8510e3c43ebc4c9aa11d7f8137510f7
SSDEEP

98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXC:TcmZl85gyjovK65E8ob5Sx8aXC

Score

7^/10

bootkit persistence

Malware Config

Targets

- Target
  
  569310df2543c80b9c500c8527ba9352bc384dbd5b5f6b59457d81e1b2cc62f3
- Size
  
  4.8MB
- MD5
  
  dac15f8b54b80d14c6d906a4b7a98835
- SHA1
  
  da51b337f8cb75f425719a791d491d220019b9bc
- SHA256
  
  569310df2543c80b9c500c8527ba9352bc384dbd5b5f6b59457d81e1b2cc62f3
- SHA512
  
  2e1f9df9c2f7f225e380ff046574fc16d30956a129eaf774f1916c3ceea8862082681a42e31c71a6489a272625328bc8a8510e3c43ebc4c9aa11d7f8137510f7
- SSDEEP
  
  98304:seLpmrmc2lAu28lkcf5YjovKqGYiOE8oLj5YINfSyo8aXC:TcmZl85gyjovK65E8ob5Sx8aXC
Score

7^/10

bootkit persistence
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitpersistence

behavioral2

bootkitpersistence