General
- Target https://www.google.com/goto?url=CAES8wEB6zswFQL7lM2xrsNwNok8Fvm8T1PVIpNUDBStGjHlQA3Gf0mcLuPy039Rd3DF0qwT4b0g3bpM8lFPweeaMhsTyZBlarbS30_WSu2_iYwebIeDkNFC8xnqHOybbkIIqDxZiyXPAi1Z38v38-zTqtuLgTBEepQkQvs587C0aPuN5bH5gCFNhjEch6L7KZzJJ4FrSsnSq43dVgJf6aRcHEGI7svfgFzxfXiybj226BMgNnwiZ0lEDGIC7AdQLzb2uy9Ach4zI4bEWcfcO7QVBxm4CDYgRl3drZ5C4D0lL7h9FbN0UXqgshL0D34AeU4iFAXwrFg
- Sample260826-bp56yaxyb1
Score
7/10
Malware Config
Targets
-
- Target https://www.google.com/goto?url=CAES8wEB6zswFQL7lM2xrsNwNok8Fvm8T1PVIpNUDBStGjHlQA3Gf0mcLuPy039Rd3DF0qwT4b0g3bpM8lFPweeaMhsTyZBlarbS30_WSu2_iYwebIeDkNFC8xnqHOybbkIIqDxZiyXPAi1Z38v38-zTqtuLgTBEepQkQvs587C0aPuN5bH5gCFNhjEch6L7KZzJJ4FrSsnSq43dVgJf6aRcHEGI7svfgFzxfXiybj226BMgNnwiZ0lEDGIC7AdQLzb2uy9Ach4zI4bEWcfcO7QVBxm4CDYgRl3drZ5C4D0lL7h9FbN0UXqgshL0D34AeU4iFAXwrFg
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.