← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
BlackLotus UEFI bootkit: Myth confirmed
WHITE Tr1sa111 2023-04-19 Modified: 2023-04-19
69
IOCs
HIGH VOLUME
blacklotus httphttpblacklotushttp downloaderuefi securebootfiguresecure bootuefiwindowscve202221894uefi bootkitvirustotalbsodfirstlojaxguardukrainebelarusarmeniadeathattackconceptaugustloadercodeexecutionnextinstallgatemanipulationpodcastlove
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
MALWARE FAMILIES
BlackLotus HTTP BlackLotus HTTP
Indicators of Compromise (32 / 69 total)
All IPv4 URL CVE FileHash-MD5 FileHash-SHA1 FileHash-SHA256 domain
TYPEINDICATORDESCRIPTIONCREATED
FileHash-SHA1 05846d5b1d37ee2d716140de4f4f984cf1e631d1 — 2023-04-19
FileHash-SHA1 06af3016accdb3dfe1c23657bf1bf91c13baa757 — 2023-04-19
FileHash-SHA1 0c0e78bf97116e781dde0e00a1cd0c29e68d623d — 2023-04-19
FileHash-SHA1 0e6dd7110c38464ecaa55ee4e2fa303ada0edefb — 2023-04-19
FileHash-SHA1 111c4998f3264617a7a9d9bf662d4b1577445b20 — 2023-04-19
FileHash-SHA1 164bb587109cfb20824303ad1609a65abb36c3e9 — 2023-04-19
FileHash-SHA1 16b12cea54360aa42e1120e82c1e9bc0371cb635 — 2023-04-19
FileHash-SHA1 17fa047c1f979b180644906fe9265f21af5b0509 — 2023-04-19
FileHash-SHA1 1f3799fed3cf43254fe30dcdfdb8dc02d82e662b — 2023-04-19
FileHash-SHA1 2ce056ae323b0380b0e87225ea0ae087a33cd316 — 2023-04-19
FileHash-SHA1 45701a83dec1dc71a48268c9d6d205f31d9e7ffb — 2023-04-19
FileHash-SHA1 4b882748faf2c6c360884c6812dd5bcbce75ebff — 2023-04-19
FileHash-SHA1 547faa2d64b85bf883955b723b07635c0a09326b — 2023-04-19
FileHash-SHA1 5a0074203abd5deb464ba0a79e14b7541a033216 — 2023-04-19
FileHash-SHA1 5dc9cbd75abd830e83641a0265bffddd2f602815 — 2023-04-19
FileHash-SHA1 6d8cee28da8bcf25a4d232feb0810452acada11d — 2023-04-19
FileHash-SHA1 71559c3e2f3950d4ee016f24ca54da17d28b9d82 — 2023-04-19
FileHash-SHA1 74ff58fce8f19083d16df0109dc91d78c94342fa — 2023-04-19
FileHash-SHA1 91f832f46e4c38ecc9335460d46f6f71352cffed — 2023-04-19
FileHash-SHA1 97aec21042df47d39ac212761729c6be484d064d — 2023-04-19
FileHash-SHA1 994dc79255aeb662a672a1814280de73d405617a — 2023-04-19
FileHash-SHA1 a5a530a91100ed5f07a5d74698b15c646dd44e16 — 2023-04-19
FileHash-SHA1 acc74217cbe3f2e727a826b34bde482dcae15be6 — 2023-04-19
FileHash-SHA1 adceec18ff009bed635d168e0b116e72096f18d2 — 2023-04-19
FileHash-SHA1 c8e6bf8b6fda161bbfa5470bcc262b1bdc92a359 — 2023-04-19
FileHash-SHA1 d1bbaa3d408e944c70b3815471eed7fa9aee6425 — 2023-04-19
FileHash-SHA1 d6bb89d8734b3e49725362dae9a868ae681e8bd6 — 2023-04-19
FileHash-SHA1 d6d3f3151b188a9da62deb95ea1d1abeff257914 — 2023-04-19
FileHash-SHA1 d82539bfc2cc7cb504be74ac74df696b13db486a — 2023-04-19
FileHash-SHA1 dae7e7c4eec2ac0dc7963c44a5a4f47d930c5508 — 2023-04-19
FileHash-SHA1 dbc064f757c69ec43517eff496146b43cba949d1 — 2023-04-19
FileHash-SHA1 fff4f28287677caabc60c8ab36786c370226588d — 2023-04-19
References (1)
↗ https://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/#:~:text=Files%20deployed%20by%20the%20BlackLotus%20installer%20on%20systems%20with%20UEFI%20Secure%20Boot%20enabled