73e5226f0938277996862fe40fe29af5907690ad0fa848128f5cc0c8959765fc | Triage

Sharing

General

Target

73e5226f0938277996862fe40fe29af5907690ad0fa848128f5cc0c8959765fc
Size

4.8MB
Sample

240905-1fdg1azdln
MD5

abe3c213056020f78770526f5e1b5a98
SHA1

b289eb6a1e953ea41624343cca5b08676d315e7c
SHA256

73e5226f0938277996862fe40fe29af5907690ad0fa848128f5cc0c8959765fc
SHA512

619c9653261099b989b761adb754e92cedc985a600c9910d0171d1e0bf1562bdeef503ef92af90f4fe39b8f2685822b96b33eac48152470d25386054f39cc7f5
SSDEEP

98304:cVeM4VwHuokyfK8PGcx2HynIiprw0F80XZeGM:6AVw6kx2SnIe84eGM

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  73e5226f0938277996862fe40fe29af5907690ad0fa848128f5cc0c8959765fc
- Size
  
  4.8MB
- MD5
  
  abe3c213056020f78770526f5e1b5a98
- SHA1
  
  b289eb6a1e953ea41624343cca5b08676d315e7c
- SHA256
  
  73e5226f0938277996862fe40fe29af5907690ad0fa848128f5cc0c8959765fc
- SHA512
  
  619c9653261099b989b761adb754e92cedc985a600c9910d0171d1e0bf1562bdeef503ef92af90f4fe39b8f2685822b96b33eac48152470d25386054f39cc7f5
- SSDEEP
  
  98304:cVeM4VwHuokyfK8PGcx2HynIiprw0F80XZeGM:6AVw6kx2SnIe84eGM
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence