7e7ab957866cf3d96137560c93ccac9a0d76777666bf6eb196dc19ee70b1f19c | Triage

Sharing

General

Target

7e7ab957866cf3d96137560c93ccac9a0d76777666bf6eb196dc19ee70b1f19c
Size

4.8MB
Sample

240929-tl8rrsthne
MD5

aebe5ad19ef7abc7b0148256db8dd917
SHA1

fe2f8e365bbfd98109f5d579305087af8dc47a34
SHA256

7e7ab957866cf3d96137560c93ccac9a0d76777666bf6eb196dc19ee70b1f19c
SHA512

08b3f8f700412fd1a0723a1b8ce7fd2bfdb6345543db582438973813a5cb2ed114909ef99b8670579b1cd834dc857042b84f8646ae3ceb1dfa56832ae48768f2
SSDEEP

98304:RVeM4VwHuokyfO8PGcx2HynIiprw0F80XZMfj+:XAVw+kx2SnIe84Cj+

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  7e7ab957866cf3d96137560c93ccac9a0d76777666bf6eb196dc19ee70b1f19c
- Size
  
  4.8MB
- MD5
  
  aebe5ad19ef7abc7b0148256db8dd917
- SHA1
  
  fe2f8e365bbfd98109f5d579305087af8dc47a34
- SHA256
  
  7e7ab957866cf3d96137560c93ccac9a0d76777666bf6eb196dc19ee70b1f19c
- SHA512
  
  08b3f8f700412fd1a0723a1b8ce7fd2bfdb6345543db582438973813a5cb2ed114909ef99b8670579b1cd834dc857042b84f8646ae3ceb1dfa56832ae48768f2
- SSDEEP
  
  98304:RVeM4VwHuokyfO8PGcx2HynIiprw0F80XZMfj+:XAVw+kx2SnIe84Cj+
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence