Overview

overview

8

Static

static

1

URLScan

urlscan

https://github.com/J...

windows7-x64

8

Resubmissions

02/10/2024, 15:31

241002-syd79axdpb 8

02/10/2024, 15:31

241002-sx2bdsxdmh 3

02/10/2024, 15:28

241002-swdtpstdqk 8

02/10/2024, 15:25

241002-stx5katdkn 8

02/10/2024, 15:22

241002-srynbatckn 8

02/10/2024, 15:19

241002-sp9b2axamd 8

02/10/2024, 15:15

241002-snbdlstanj 8

02/10/2024, 15:11

241002-skqzwswgqb 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://github.com/JackDoesMalwares/Gocullinator

  • Sample

    241002-syd79axdpb

Score
8/10
bootkitdefense_evasiondiscoveryevasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      https://github.com/JackDoesMalwares/Gocullinator

    Score
    8/10
    bootkitdefense_evasiondiscoveryevasionpersistenceprivilege_escalation

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks