General
- Target GTA2DEMO.exe
- Size 12.4MB
- Sample260801-clcwnaca24
- SHA256 f8fc0a9653932f008a03e56ea892fb31dbeb98d228cc4df61b910bcb35d08d21
Score
10/10
Malware Config
Targets
-
- Target GTA2DEMO.exe
- Size 12.4MB
- SHA256 f8fc0a9653932f008a03e56ea892fb31dbeb98d228cc4df61b910bcb35d08d21
Score10/10-
Detects KillMBR
-
Family: KillMBR
KillMBR is a trojan that attempts to overwrite the Master Boot Record.
-
Executes dropped EXE
-
Loads dropped DLL
-
Deobfuscate/Decode Files or Information
Payload decoded via CertUtil.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Deobfuscate/Decode Files or Information
1Modify Registry
1Pre-OS Boot
1Bootkit
1