7dbc0544119b2224d2d02ca17bb385c184feb3fa767eeab028696124fa8b5f8c | Triage

Sharing

General

Target

7dbc0544119b2224d2d02ca17bb385c184feb3fa767eeab028696124fa8b5f8c
Size

4.8MB
Sample

240911-sgdkdsxepf
MD5

ae5612d6aea49aa79b90a048cf46910a
SHA1

be39271465a8340d4c070b8c1a2395709346dd80
SHA256

7dbc0544119b2224d2d02ca17bb385c184feb3fa767eeab028696124fa8b5f8c
SHA512

4031cc887465ac609e4912a345d7ea22451017f88005ac37411345c71ddcd6ff115df284011d4c2264662e5a36ed1fd04c980218babacd615cfbe087244225f5
SSDEEP

98304:cVeM4VwHuokyfK8PGcx2HynIiprw0F80XZeG9:6AVw6kx2SnIe84eG9

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  7dbc0544119b2224d2d02ca17bb385c184feb3fa767eeab028696124fa8b5f8c
- Size
  
  4.8MB
- MD5
  
  ae5612d6aea49aa79b90a048cf46910a
- SHA1
  
  be39271465a8340d4c070b8c1a2395709346dd80
- SHA256
  
  7dbc0544119b2224d2d02ca17bb385c184feb3fa767eeab028696124fa8b5f8c
- SHA512
  
  4031cc887465ac609e4912a345d7ea22451017f88005ac37411345c71ddcd6ff115df284011d4c2264662e5a36ed1fd04c980218babacd615cfbe087244225f5
- SSDEEP
  
  98304:cVeM4VwHuokyfK8PGcx2HynIiprw0F80XZeG9:6AVw6kx2SnIe84eG9
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence