General
- Target lowp.exe
- Size 110KB
- Sample240612-m4ehbawblm
- SHA256 5b1a83d7ed4db12af8673df9e980259aa291d9ae79255bf490fac34a3e54a080
- MD5 242124db01f029f2b112de244b54667c
- SHA1 4b0a030a739704c35b9b51d2e180d3bee138ec25
- SHA512 75eb508792d1b344b611e44b05563aece859a8cc13068d2d026e5b5cbf7f70ebec21f776e92a6736aef802e53d698846994c8f163ad270bdada262150643beaf
- SSDEEP 3072:4Cu6t5GYQiiri9Bi2fRWtbT9zjYomkNxzlz3f4/WZP:3HtsIirItRor93
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Malware Config
Targets
-
- Target lowp.exe
- Size 110KB
- SHA256 5b1a83d7ed4db12af8673df9e980259aa291d9ae79255bf490fac34a3e54a080
- MD5 242124db01f029f2b112de244b54667c
- SHA1 4b0a030a739704c35b9b51d2e180d3bee138ec25
- SHA512 75eb508792d1b344b611e44b05563aece859a8cc13068d2d026e5b5cbf7f70ebec21f776e92a6736aef802e53d698846994c8f163ad270bdada262150643beaf
- SSDEEP 3072:4Cu6t5GYQiiri9Bi2fRWtbT9zjYomkNxzlz3f4/WZP:3HtsIirItRor93
- MD5 SHA1 SHA512 SSDEEP
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1