Overview

overview

8

Static

static

1

URLScan

urlscan

https://github.com/J...

windows7-x64

Resubmissions

02/10/2024, 17:21

241002-vw7g5a1gre8

02/10/2024, 17:16

241002-vtez4axgnl8

02/10/2024, 17:15

241002-vssvka1fmh4

02/10/2024, 17:12

241002-vqsrsaxfnk8

02/10/2024, 17:06

241002-vmka8s1dje8

02/10/2024, 16:18

241002-tr655awaml8

02/10/2024, 16:16

241002-tqthmsvhpm8

02/10/2024, 16:12

241002-tnypksygjc8

02/10/2024, 16:04

241002-tjdhvaydqf8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://github.com/JackDoesMalwares/Gocullinator
  • Sample241002-tqthmsvhpm
Score
8/10
bootkitdefense_evasiondiscoverypersistence

Malware Config

Targets

    • Target
      https://github.com/JackDoesMalwares/Gocullinator
    Score
    8/10
    bootkitdefense_evasiondiscoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks