MITRE ATT&CKsoftware (malware)

S0114 BOOTRASH

Published 2017-05-31 Modified 2024-11-17 Official page ↗

Domain: enterprise
Platforms: Windows
Version: 1.1
Created: 2017-05-31

Description

BOOTRASH is a Bootkit that targets Windows operating systems. It has been used by threat actors that target the financial sector.

Related

Uses · MITRE ATT&CK (2)

T1564.005 Hidden File System sub-technique
T1542.003 Bootkit sub-technique

References

https://www.fireeye.com/blog/threat-research/2015/12/fin1-targets-boot-record.html FireEye Bootkits
https://web.archive.org/web/20190926040727/https://www.sans.org/cyber-security-summit/archives/file/summit-archive-1498163766.pdf FireEye BOOTRASH SANS
https://web.archive.org/web/20211024160454/https://www.fireeye.com/content/dam/fireeye-www/current-threats/pdfs/rpt-mtrends-2016.pdf Mandiant M Trends 2016