ROCKBOOT
Description
(FireEye) ROCKBOOT can access and write to the compromised system’s hard disk drive beneath the operating system and file system to bypass the normal MBR boot sequence and execute malware prior to the host operating system being initialized. ROCKBOOT does not contain a malicious payload but relies on a secondary payload for malicious activities, which is specified at install time.
Names
| Name |
|---|
| ROCKBOOT |
Category
Malware
Type
- Loader
Information
Mitre Attack
Other Information
Uuid
135aca6a-613b-46e9-92c3-b812c08643fb
Last Card Change
2020-04-22