Resubmissions

16/10/2024, 09:46

241016-lrvs4axgnp8

16/10/2024, 09:31

241016-lg64datara8

General

  • Target
    New Piskel.png
  • Size 117B
  • Sample241016-lg64datara
  • SHA256 87cce25672ddd1ea21d11d9ae85d97e279642c29b224b9c6406365b7ed2c0ec4
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      New Piskel.png
    • Size 117B
    • SHA256 87cce25672ddd1ea21d11d9ae85d97e279642c29b224b9c6406365b7ed2c0ec4
    • MD5 SHA1 SHA512
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks