bf8069da-0ffc-463d-b17c-3e0ee49d0585
bf8069da-0ffc-463d-b17c-3e0ee49d0585
Description
This was provided by Alt Linux LTD and revoked Jul-20
This download link contains the Revoked Bootloader!
Commands
bcdedit /copy "{current}" /d "TheBoots" | {% if ($_ -match '{\S+}') { bcdedit /set $matches[0] path \windows\temp\ } }
Use Case | Privileges | Operating System |
---|---|---|
Persistence | 64-bit |
Detections
YARA 🏹
Expand
with header and size limitation
without header and size limitation
for renamed bootloader files
Resources
CVE
Known Vulnerable Samples
Property | Value |
---|---|
Filename | |
MD5 | |
SHA1 | |
SHA256 | 5C39F0E5E0E7FA3BE05090813B13D161ACAF48494FDE6233B452C416D29CDDBE |
Authentihash MD5 | |
Authentihash SHA1 | |
Authentihash SHA256 | C452AB846073DF5ACE25CCA64D6B7A09D906308A1A65EB5240E3C4EBCAA9CC0C |
Imports
Expand
Imports
Expand
ImportedFunctions
Expand
ExportedFunctions
Expand
Signature
Expand
last_updated: 2023-08-31