Analysis
-
max time kernel
132s -
max time network
135s -
platform
windows10_x64 -
resource
win10v20210410 -
submitted
15-05-2021 16:54
General
-
Target
f5a644a7aefd863f0a2d114da6a631726631e96ea0752a8c5505aca2135646be.exe
-
Size
1.2MB
-
MD5
cf517d077e9c152120787eb6b251615b
-
SHA1
70abec0dc55058b1ba6f3c5109031be66944e404
-
SHA256
f5a644a7aefd863f0a2d114da6a631726631e96ea0752a8c5505aca2135646be
-
SHA512
2968007c5b700aae858a94e34a934ad2a1f3b6896c234fb5aa1aba98f49d7202e1cb7c5aeb3706403de798bd875842fef6c38fc4e82be10e45c8c905ab980c95
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Checks SCSI registry key(s) 3 TTPs 3 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 12 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\f5a644a7aefd863f0a2d114da6a631726631e96ea0752a8c5505aca2135646be.exe"C:\Users\Admin\AppData\Local\Temp\f5a644a7aefd863f0a2d114da6a631726631e96ea0752a8c5505aca2135646be.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB