hxxp://google[.]com | Triage

Submit
Reports

Overview

overview

6

Static

static

1

URLScan

urlscan

1

http://google.com

windows10-1703-x64

6

http://google.com

macos-10.15-amd64

1

Sharing

General

Target

http://google.com
Sample

230331-yzy7psdb28

Score

6^/10

bootkit macos persistence

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

http://google.com

Resource

win10-20230220-en

bootkit persistence

windows10-1703-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

http://google.com

Resource

macos-20220504-en

macos-10.15-amd64

0 signatures

150 seconds

Malware Config

Targets

- Target
  
  http://google.com
Score

6^/10

bootkit persistence
- Adds Run key to start application
  persistence
- Legitimate hosting services abused for malware hosting/C2
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Bootkit

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

Impact

Tasks

static1

urlscan1

behavioral1

bootkitpersistence

behavioral2

© 2018-2024

Terms | Privacy