Overview

overview

7

Static

static

3

thoukeys/bore.exe

windows10-2004-x64

7

thoukeys/bore.exe

windows11-ltsc_2024-x64

7

thoukeys/thykey.exe

windows10-2004-x64

thoukeys/thykey.exe

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

  • Target
    thoukeys.zip
  • Size 14.0MB
  • Sample261113-wa7fnset2w
  • SHA256 638dea90b4add08922d7fdf4f211169e838fc48ec32994a7c742bbde59c969db
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
bootkitdefense_evasiondiscoveryexecutionpersistencepyinstaller

Malware Config

Targets

    • Target
      thoukeys/bore.exe
    • Size 9.9MB
    • SHA256 0b5b09010474b2dc1eb2ae7e81253feb682704fc9f289f40d1c5f61265fb4d50
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    behavioral1behavioral2
    • Target
      thoukeys/thykey.exe
    • Size 14.6MB
    • SHA256 a6f5cda2302f174e0790d2d31325b0a91596c10d2d9ea94504f0640bfc9053db
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    bootkitdefense_evasionexecutionpersistence

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence
    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks