Overview

overview

8

Static

static

3

2024-11-09...er.exe

windows7-x64

8

2024-11-09...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-11-09_27d032411a42c6ba2d04dd91bf4020c1_avoslocker_luca-stealer
  • Size 4.4MB
  • Sample241109-ngjzystdje
  • SHA256 e35ed71c2af051bcfa338a2595f1b30f310bfc20502d9389c933e28a538f5bd3
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
bootkitdiscoveryevasionpersistencetrojan

Malware Config

Targets

    • Target
      2024-11-09_27d032411a42c6ba2d04dd91bf4020c1_avoslocker_luca-stealer
    • Size 4.4MB
    • SHA256 e35ed71c2af051bcfa338a2595f1b30f310bfc20502d9389c933e28a538f5bd3
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    bootkitdiscoveryevasionpersistencetrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks