General
- Target boykisser.exe
- Size 2.2MB
- Sample260727-ze2mrsdb98
- SHA256 3eae158b3abddc261e419c5929f38c22a85ce745f138f90835469802d443beca
Score
10/10
Malware Config
Targets
-
- Target boykisser.exe
- Size 2.2MB
- SHA256 3eae158b3abddc261e419c5929f38c22a85ce745f138f90835469802d443beca
Score10/10-
Modifies Windows Defender DisableAntiSpyware settings
-
Modifies Windows Defender Real-time Protection settings
-
Disables Task Manager via registry modification
-
Modifies service settings
Alters the configuration of existing services.
-
Stops running service(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Sets desktop wallpaper using registry
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Create or Modify System Process
4Windows Service
4Event Triggered Execution
1Netsh Helper DLL
1