5b8433fe8651e84aaed815825b9bd15994a6533f8f2132c8b2ad61c233f5b35a | Triage

Sharing

General

Target

7674c4800e8d1054ab455e0402c61a10N.exe
Size

2.4MB
Sample

240902-cmp8dayemr
MD5

7674c4800e8d1054ab455e0402c61a10
SHA1

91aca5798cd7556c41468b2adbfbddd785b8b0b8
SHA256

5b8433fe8651e84aaed815825b9bd15994a6533f8f2132c8b2ad61c233f5b35a
SHA512

02b313ce3714b5d51a6f88785e774c98b3a93bfc5bfbe9f309f812d7f28eee064e98e1c82dc2e2f15260dd0eba6010959bb1679484f52b2a41c644f1b027266c
SSDEEP

49152:E7ziogAoHSPFfy0AuKwGJSfEZawfXSF4o1apMR17SVwHtiQ:E3HiStlYZlXS/1apMR17fcQ

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  7674c4800e8d1054ab455e0402c61a10N.exe
- Size
  
  2.4MB
- MD5
  
  7674c4800e8d1054ab455e0402c61a10
- SHA1
  
  91aca5798cd7556c41468b2adbfbddd785b8b0b8
- SHA256
  
  5b8433fe8651e84aaed815825b9bd15994a6533f8f2132c8b2ad61c233f5b35a
- SHA512
  
  02b313ce3714b5d51a6f88785e774c98b3a93bfc5bfbe9f309f812d7f28eee064e98e1c82dc2e2f15260dd0eba6010959bb1679484f52b2a41c644f1b027266c
- SSDEEP
  
  49152:E7ziogAoHSPFfy0AuKwGJSfEZawfXSF4o1apMR17SVwHtiQ:E3HiStlYZlXS/1apMR17fcQ
Score

7^/10

bootkit discovery persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Pre-OS Boot

Bootkit

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence