Resubmissions

07/05/2024, 12:28

240507-pndl7aac87 8

07/05/2024, 12:27

240507-pmykzaff6v 1

General

  • Target

    https://scratch.mit.edu/projects/472598865

  • Sample

    240507-pndl7aac87

Malware Config

Targets

    • Target

      https://scratch.mit.edu/projects/472598865

    • Disables Task Manager via registry modification

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks