Overview

overview

6

Static

static

3

NocturneLoader.exe

windows10-1703-x64

6

Resubmissions

07/10/2024, 18:32

241007-w6nnfavfja8

07/10/2024, 18:22

241007-w1dahs1djm6

07/10/2024, 18:16

241007-wwl2vs1cnr10

Sharing

Copy URL Twitter E-mail

General

  • Target
    NocturneLoader.bin
  • Size 607KB
  • Sample241007-w1dahs1djm
  • SHA256 4c3fad8ea837861fe54356ad6e7e40cce2fe305b9cb323f07d8802c93a440b70
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
bootkitdiscoverypersistence

Malware Config

Targets

    • Target
      NocturneLoader.bin
    • Size 607KB
    • SHA256 4c3fad8ea837861fe54356ad6e7e40cce2fe305b9cb323f07d8802c93a440b70
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    bootkitdiscoverypersistence

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks