Overview

overview

10

Static

static

1

Temp.bat

windows10-2004-x64

10

Temp.bat

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Temp.BAT
  • Size 11KB
  • Sample260812-cmlvysttex
  • SHA256 a6e4a10576fae9a7ecf407d6dca015355c134ca5c61b25e8aa583cff6817d864
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
bootkitdefense_evasiondiscoverydropperevasionexecutionimpactpersistenceransomwaretrojan

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Windows Command Shell

1
T1059.003

System Services

2
T1569

Service Execution

2
T1569.002

Windows Management Instrumentation

1
T1047

Persistence

BITS Jobs

1
T1197

Create or Modify System Process

5
T1543

Windows Service

5
T1543.003

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Create or Modify System Process

5
T1543

Windows Service

5
T1543.003

Defense Evasion

BITS Jobs

1
T1197

Direct Volume Access

1
T1006

Impair Defenses

4
T1562

Disable or Modify Tools

3
T1562.001

Indicator Removal

2
T1070

File Deletion

2
T1070.004

Modify Registry

3
T1112

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Peripheral Device Discovery

1
T1120

Query Registry

1
T1012

Remote System Discovery

1
T1018

System Information Discovery

1
T1082

System Network Configuration Discovery

1
T1016

Internet Connection Discovery

1
T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Inhibit System Recovery

3
T1490

Service Stop

2
T1489

Tasks