General
- Target remotera.exe
- Size 14.2MB
- Sample260813-j251pshf43
- SHA256 342d85a9e159195c80bf0f9470e0c6ea1ecca00add5f014a2dc9d38f1a0f99ed
Score
10/10
Malware Config
Targets
-
- Target remotera.exe
- Size 14.2MB
- SHA256 342d85a9e159195c80bf0f9470e0c6ea1ecca00add5f014a2dc9d38f1a0f99ed
Score10/10-
UAC bypass
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
2Pre-OS Boot
1Bootkit
1