General
- Target 123.rar
- Size 74KB
- Sample260719-fpca3sey8x
- SHA256 cff8be8957319c37a36e4be62146cad3453f36fcaa0b4780e90926904f04e2de
Score
8/10
Malware Config
Targets
-
- Target Debug/net8.0-windows/9et.dll
- Size 16KB
- SHA256 68ab915ec716e2cf5f3352fcd2e711ecefe7d20b6a1e2e3bea33fe4fcf88d99f
Score1/10 -
- Target Debug/net8.0-windows/9et.exe
- Size 148KB
- SHA256 8b3eec1c36026d20e9047eb5851b649575d9d043d0123523ab8741ff5164b642
Score8/10-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1