Resubmissions

06/07/2024, 19:03

240706-xqq93ashna 1

06/07/2024, 18:54

240706-xkfalszfpm 7

06/07/2024, 18:47

240706-xflxlasdkb 1

06/07/2024, 18:35

240706-w8m5pasalb 7

06/07/2024, 18:28

240706-w4lq3aygpj 10

General

  • Target

    https://archive.org/details/malware-pack-2

  • Sample

    240706-xkfalszfpm

Malware Config

Targets

    • Target

      https://archive.org/details/malware-pack-2

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks