General
- Target tm220@1716_464408.exe
- Size 652KB
- Sample260730-xa85yavgma
- SHA256 73f03b369e9df60c2dc97baefcdc4ba920da3a2126c873a4654e1a83510d3b87
- MD5 31549917cdc6e3f9d40a48ea5998493f
- SHA1 c0f7e826645b1ba2ba1fed866992beb9de7a31df
- SHA512 709737c36ef4fe96e99dcac210854a760cbbcff7af428620a0a83f16a5db09af4dbe2b52ccd4cff08fe0d5d4e544ddd9474c7c45005938a32705960c3581dad1
- SSDEEP 12288:pC6wyk1nvfBP0FQoOd/566f81qjbravk7o3xLWAB8TMfo+aqwFtaif8dHOqPNspj:pC6wp1vfhboOb66Uyavk8hdo+g8BOONu
- TLSH T178E42231EAA94801F21BCD367951C6B22878FC44D3D1920B63DCBF67ABBA711513876E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
tm220@1716_464408.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target tm220@1716_464408.exe
- Size 652KB
- SHA256 73f03b369e9df60c2dc97baefcdc4ba920da3a2126c873a4654e1a83510d3b87
- MD5 31549917cdc6e3f9d40a48ea5998493f
- SHA1 c0f7e826645b1ba2ba1fed866992beb9de7a31df
- SHA512 709737c36ef4fe96e99dcac210854a760cbbcff7af428620a0a83f16a5db09af4dbe2b52ccd4cff08fe0d5d4e544ddd9474c7c45005938a32705960c3581dad1
- SSDEEP 12288:pC6wyk1nvfBP0FQoOd/566f81qjbravk7o3xLWAB8TMfo+aqwFtaif8dHOqPNspj:pC6wp1vfhboOb66Uyavk8hdo+g8BOONu
- TLSH T178E42231EAA94801F21BCD367951C6B22878FC44D3D1920B63DCBF67ABBA711513876E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Pre-OS Boot
1Bootkit
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1