Malware: BOOTRASH

Description

[BOOTRASH](https://attack.mitre.org/software/S0114) is a [Bootkit](https://attack.mitre.org/techniques/T1542/003) that targets Windows operating systems. It has been used by threat actors that target the financial sector.(Citation: Mandiant M Trends 2016)(Citation: FireEye Bootkits)(Citation: FireEye BOOTRASH SANS)

External References

• mitre-attack
• FireEye Bootkits
• FireEye BOOTRASH SANS
• Mandiant M Trends 2016

Techniques Used by This Malware

• T1542.003 — Bootkit
• T1564.005 — Hidden File System