dd1d5b2021f74127263f62900b4552a0659473e734f42b99bfb418c7438e8406 | Triage

Sharing

General

Target

dd1d5b2021f74127263f62900b4552a0659473e734f42b99bfb418c7438e8406
Size

4.8MB
Sample

241018-cmbd8a1anc
MD5

8373cec3918b0fdcc9fc07dedf525110
SHA1

23d7d7bccc32d35c941a19bcf7a1dad2bce45d58
SHA256

dd1d5b2021f74127263f62900b4552a0659473e734f42b99bfb418c7438e8406
SHA512

2b9d6b90607d2a1e14c519e94053e0f720e2b0e0801e9177793b5af7dfb72833e28cf5afe260ffd5feb530cef40ced40ec439c7f21e473ca13d49fb8cc1ff6be
SSDEEP

98304:gVeM4VwHuokyfC8PGcx2HynIiprw0F80XZrjnu:GAVwykx2SnIe84Xnu

Score

7^/10

bootkit discovery persistence

Malware Config

Targets

- Target
  
  dd1d5b2021f74127263f62900b4552a0659473e734f42b99bfb418c7438e8406
- Size
  
  4.8MB
- MD5
  
  8373cec3918b0fdcc9fc07dedf525110
- SHA1
  
  23d7d7bccc32d35c941a19bcf7a1dad2bce45d58
- SHA256
  
  dd1d5b2021f74127263f62900b4552a0659473e734f42b99bfb418c7438e8406
- SHA512
  
  2b9d6b90607d2a1e14c519e94053e0f720e2b0e0801e9177793b5af7dfb72833e28cf5afe260ffd5feb530cef40ced40ec439c7f21e473ca13d49fb8cc1ff6be
- SSDEEP
  
  98304:gVeM4VwHuokyfC8PGcx2HynIiprw0F80XZrjnu:GAVwykx2SnIe84Xnu
Score

7^/10

bootkit discovery persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Pre-OS Boot

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Pre-OS Boot

Bootkit

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

bootkitdiscoverypersistence

behavioral2

bootkitdiscoverypersistence