Analysis
-
max time kernel
41s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
20-05-2022 05:40
General
-
Target
fa86c00725908446692b4e536d6aa3abd5064820c44d6914996ad12441ee2f9e.exe
-
Size
750KB
-
MD5
4ca022bb94c08f39b432b8bb1834e4b8
-
SHA1
6382af64144446e98f8918b4211c91fac2cab903
-
SHA256
fa86c00725908446692b4e536d6aa3abd5064820c44d6914996ad12441ee2f9e
-
SHA512
7de2df3f189fd305a4294329d3bcceb9f5ebb30eccd9858e4915a38ebc75c2904592e2746d165436214f7ded7ebd1c05f5ea35ca3a9d556a5cdc67884678e87a
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fa86c00725908446692b4e536d6aa3abd5064820c44d6914996ad12441ee2f9e.exe"C:\Users\Admin\AppData\Local\Temp\fa86c00725908446692b4e536d6aa3abd5064820c44d6914996ad12441ee2f9e.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1080-54-0x00000000755C1000-0x00000000755C3000-memory.dmpFilesize
8KB
-
memory/1080-55-0x0000000000400000-0x000000000063B000-memory.dmpFilesize
2.2MB
-
memory/1080-56-0x0000000000400000-0x000000000063B000-memory.dmpFilesize
2.2MB
-
memory/1080-57-0x0000000000400000-0x000000000063B000-memory.dmpFilesize
2.2MB
-
memory/1080-58-0x0000000000400000-0x000000000063B000-memory.dmpFilesize
2.2MB