Overview

overview

8

Static

static

1

cursor.jpg

windows10-2004-x64

1

cursor.jpg

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    cursor.jpg
  • Size 39KB
  • Sample260727-napxmaae88
  • SHA256 3a4fc76a7d2d3981be6aab3e905d0e7d682bcb8d99fa1c9c2550e94935e5f648
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
bootkitdefense_evasiondiscoveryexecutionpersistenceransomware

Malware Config

Targets

    • Target
      cursor.jpg
    • Size 39KB
    • SHA256 3a4fc76a7d2d3981be6aab3e905d0e7d682bcb8d99fa1c9c2550e94935e5f648
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    bootkitdefense_evasiondiscoveryexecutionpersistenceransomware

    • Disables Task Manager via registry modification

      defense_evasion

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks