Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
25-11-2022 13:11
Static task
static1
Behavioral task
behavioral1
Sample
c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2.exe
Resource
win10v2004-20220901-en
General
-
Target
c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2.exe
-
Size
12KB
-
MD5
78cc97e1ec76c9ebc914bd69a93030f9
-
SHA1
892d7b421cb75fc4e029c6ce9e2025a291754940
-
SHA256
c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2
-
SHA512
65d640d97cb70fbcaa8b11f6ee7b3c1c7ec5821318c73949a4a3fd3ef12a3caed4747583df012a0cd5aa047f3432652f39ca2af1fe2089be3e0297a990c28ca9
-
SSDEEP
192:bbQrscEZvdPwdXM0z1Cfm5InjvLrtdMiZBFgVtRyRDZDRKt/qTx3Z:nQ4tDIZUmGnjTrXMWBOwR9UEx
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2.exedescription ioc process File opened for modification \??\PhysicalDrive0 c0f1d4ffec221243c266b02a24cf429fea1d696552dfd375cfd4575decb554a2.exe