379f84684e7f3fe5f4a325a6aed72fa6744df2b5d45c6973df0a98c2115f59a1 | Triage

Sharing

General

Target

379f84684e7f3fe5f4a325a6aed72fa6744df2b5d45c6973df0a98c2115f59a1
Size

4.8MB
Sample

240915-cvxx7a1cqc
MD5

6a733bb4159596673933f990679673af
SHA1

3e69e12ebd41fc9830512b6e35d0ef27db44062d
SHA256

379f84684e7f3fe5f4a325a6aed72fa6744df2b5d45c6973df0a98c2115f59a1
SHA512

67f91955b2e12ba7619a85dc1a44f89bffcf60fd22d522433f7c783c467f929b774fba68d69ac751886058b6c710620264b25b96290438ecf59c8b90ea286afd
SSDEEP

98304:AVeM4VwHuokyfn8PGcx2HynIiprw0F80XZrL2T:mAVw3kx2SnIe84X2T

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  379f84684e7f3fe5f4a325a6aed72fa6744df2b5d45c6973df0a98c2115f59a1
- Size
  
  4.8MB
- MD5
  
  6a733bb4159596673933f990679673af
- SHA1
  
  3e69e12ebd41fc9830512b6e35d0ef27db44062d
- SHA256
  
  379f84684e7f3fe5f4a325a6aed72fa6744df2b5d45c6973df0a98c2115f59a1
- SHA512
  
  67f91955b2e12ba7619a85dc1a44f89bffcf60fd22d522433f7c783c467f929b774fba68d69ac751886058b6c710620264b25b96290438ecf59c8b90ea286afd
- SSDEEP
  
  98304:AVeM4VwHuokyfn8PGcx2HynIiprw0F80XZrL2T:mAVw3kx2SnIe84X2T
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence