Overview

overview

8

Static

static

1

URLScan

urlscan

https://github.com/p...

windows10-1703-x64

8

Resubmissions

16/06/2024, 03:01

240616-dh98esxarh 8

16/06/2024, 02:57

240616-dfqe8s1bmn 8

16/06/2024, 02:49

240616-dbgyaszhpm 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://github.com/pankoza2-pl/malware

  • Sample

    240616-dbgyaszhpm

Score
8/10
bootkitevasionpersistenceupx

Malware Config

Targets

    • Target

      https://github.com/pankoza2-pl/malware

    Score
    8/10
    bootkitevasionpersistenceupx

    • Disables Task Manager via registry modification

      evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks