General

  • Target
    VoidBoot.exe
  • Size 158KB
  • Sample260802-vg29vsda23
  • SHA256 ddd4e90b1d9013795659f3128757b23bc375339aec79e7015824db92134f6c69
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      VoidBoot.exe
    • Size 158KB
    • SHA256 ddd4e90b1d9013795659f3128757b23bc375339aec79e7015824db92134f6c69
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks