General

  • Target

    https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTVNWjF6MHBEdjVLWS15NTNFYkVyTXBuVGFKd3xBQ3Jtc0ttcnlQX0Z2QktfSFFQWDdSbll5Vnc3VGs0X3BwU1dCVDdqakZKeldDX2gzOTExTkIzZmd2TmhZSm5YMllsd184b1JDd09xMy1Fc01ObDF1aDBhQ1ppRTF5NEc0Sm5ydjR1WENPNWFZWEdPRWFmSVVKWQ&q=https%3A%2F%2Fwipet.malwarewatch.org%2Fmalware&v=E90DD9gkOCo

  • Sample

    230406-s55zjsdf97

Score
7/10

Malware Config

Targets

    • Target

      https://www.youtube.com/redirect?event=video_description&redir_token=QUFFLUhqbTVNWjF6MHBEdjVLWS15NTNFYkVyTXBuVGFKd3xBQ3Jtc0ttcnlQX0Z2QktfSFFQWDdSbll5Vnc3VGs0X3BwU1dCVDdqakZKeldDX2gzOTExTkIzZmd2TmhZSm5YMllsd184b1JDd09xMy1Fc01ObDF1aDBhQ1ppRTF5NEc0Sm5ydjR1WENPNWFZWEdPRWFmSVVKWQ&q=https%3A%2F%2Fwipet.malwarewatch.org%2Fmalware&v=E90DD9gkOCo

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Bootkit

1
T1067

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

2
T1120

System Information Discovery

3
T1082

Tasks