Resubmissions

15-01-2024 13:16

240115-qhxnjsgdgk 1

02-01-2024 07:45

240102-jlpzjsgdg8 8

01-01-2024 19:34

240101-x93gfagcaj 1

01-01-2024 19:21

240101-x2y42saff3 6

01-01-2024 12:16

240101-pfkqjaafan 6

31-12-2023 10:47

231231-mvqh8ahdb5 1

29-12-2023 09:34

231229-lj6wdsgch5 6

28-12-2023 06:08

231228-gv5p9adaeq 1

28-12-2023 05:48

231228-ghrmvsahal 7

28-12-2023 05:47

231228-ghbawaagel 1

General

  • Target

    https://github.com

  • Sample

    240102-jlpzjsgdg8

Malware Config

Targets

    • Target

      https://github.com

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks