Resubmissions

08-05-2024 14:11

240508-rhjx5aag36 8

08-05-2024 14:07

240508-re2zjagc5y 8

08-05-2024 14:03

240508-rc5mmsae26 1

General

  • Target

    http://github.com

  • Sample

    240508-rhjx5aag36

Malware Config

Targets

    • Target

      http://github.com

    • Disables Task Manager via registry modification

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks