Analysis
- max time kernel
80s - max time network
126s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
14/10/2021, 06:13
Static task
static1
Behavioral task
behavioral1
Sample
f385ecb9af185c42be760efeac963705.exe
Resource
win7-en-20210920
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
f385ecb9af185c42be760efeac963705.exe
Resource
win10-en-20210920
0 signatures
0 seconds
General
- Target f385ecb9af185c42be760efeac963705.exe
- Size 632KB
- Sample211014-gysj4agbgr
- SHA256 ce1ab55a70d98baf0f844e1bc21f376ff356ddb9067523f908315934c346737a
- MD5 f385ecb9af185c42be760efeac963705
- SHA1 d0af5a7ff1f30ff568fc7485ec0593fe99be6d46
- SHA512 01659368e9cd2cef7b06b6309a7aca3e75d880bae0153af326c468f894002333cec83d080dd086bcede61f0229a2b2681c47d8aeaf731a4cf8f3b32c69882cfa
- MD5 SHA1 SHA512
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 f385ecb9af185c42be760efeac963705.exe