General

  • Target
    https://www.google.com/aclk?sa=L&ai=DChsSEwj887-7-KWWAxW0S0cBHZ1SGs8YACICCAEQABoCcXU&co=1&gclid=Cj0KCQjwv4XUBhDBARIsAE6bQUQRAcuqvmAT_dh9K5IVcqpD5I7cqraGBXSBdMCNyQJlOlYAfiT1zCIaAmccEALw_wcB&cid=CAASugHkaJxzy5qoF2GqdVetQg-3semFkDJLPxvgN9QuCpGeZOp75VvN5Vz5VElFABj2QgRlHjvDzl4pBpgLbV-1qx_ksDki-uidks-zRdAgVoco7zXnDHuQ0vnB4GKIt4u4LrX4t3R8ozKAAZBIo75jJLaJFTvoGjvLN7wvUB6YaR2jFczC2Fdl6M22rafqbw79OP93J6Cd8m_1QtaAAl1SY_X7-IHzPX_mTRTR_14Qlvqj9IsJ_L3Jd4-KTmM&cce=2&sig=AOD64_1bWswWAKMG5fQbyR5_ZkegUTPFnQ&q&adurl&ved=2ahUKEwiV6bi7-KWWAxUPFmIAHYR0O2sQ0Qx6BAgNEAE
  • Sample260817-blympacr7s

Malware Config

Targets

    • Target
      https://www.google.com/aclk?sa=L&ai=DChsSEwj887-7-KWWAxW0S0cBHZ1SGs8YACICCAEQABoCcXU&co=1&gclid=Cj0KCQjwv4XUBhDBARIsAE6bQUQRAcuqvmAT_dh9K5IVcqpD5I7cqraGBXSBdMCNyQJlOlYAfiT1zCIaAmccEALw_wcB&cid=CAASugHkaJxzy5qoF2GqdVetQg-3semFkDJLPxvgN9QuCpGeZOp75VvN5Vz5VElFABj2QgRlHjvDzl4pBpgLbV-1qx_ksDki-uidks-zRdAgVoco7zXnDHuQ0vnB4GKIt4u4LrX4t3R8ozKAAZBIo75jJLaJFTvoGjvLN7wvUB6YaR2jFczC2Fdl6M22rafqbw79OP93J6Cd8m_1QtaAAl1SY_X7-IHzPX_mTRTR_14Qlvqj9IsJ_L3Jd4-KTmM&cce=2&sig=AOD64_1bWswWAKMG5fQbyR5_ZkegUTPFnQ&q&adurl&ved=2ahUKEwiV6bi7-KWWAxUPFmIAHYR0O2sQ0Qx6BAgNEAE
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks