General

  • Target
    https://cdn.discordapp.com/attachments/1466178781076000993/1528050966753181929/MemeSense_.zip?ex=6a87bc9c&is=6a866b1c&hm=7dbfa6077f0439cf7dd1dbfa60ce1d02cd7f4a903ab614d10515bd815b1d7e07&
  • Sample260820-rt3jlsyfme

Malware Config

Targets

    • Target
      https://cdn.discordapp.com/attachments/1466178781076000993/1528050966753181929/MemeSense_.zip?ex=6a87bc9c&is=6a866b1c&hm=7dbfa6077f0439cf7dd1dbfa60ce1d02cd7f4a903ab614d10515bd815b1d7e07&
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks