Analysis

  • max time kernel
    38s
  • max time network
    46s
  • platform
    windows7_x64
  • resource
    win7-20220414-en
  • submitted
    24-05-2022 21:51

General

  • Target

    616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2.exe

  • Size

    956KB

  • MD5

    d6e0738dd82aad7e9a69c82d90222c99

  • SHA1

    f95d5104308894c9e687a1bc19f2f4306493afdd

  • SHA256

    616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2

  • SHA512

    734e286fe3fa419d45d5fdbc10d80eebaf9c80fdfefe5b917eb5f162ef3551b7b0ec4702fef86505845fec3af4adae2da57cd9c3ec208532a323cbdb885586da

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2.exe
    "C:\Users\Admin\AppData\Local\Temp\616fdb288921e5ea95792679d2725f640c4ba3c08e40e7a9c58113903f6ecef2.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:972

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/972-54-0x0000000075DF1000-0x0000000075DF3000-memory.dmp

    Filesize

    8KB

  • memory/972-55-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB

  • memory/972-56-0x0000000010000000-0x000000001000B000-memory.dmp

    Filesize

    44KB