Analysis
-
max time kernel
44s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
26-11-2022 23:26
Static task
static1
Behavioral task
behavioral1
Sample
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe
Resource
win10v2004-20220812-en
General
-
Target
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe
-
Size
1.1MB
-
MD5
f7c517ea929260dc6e4e8e0005060069
-
SHA1
b827b9cb1db1ec58d9dd97f6bad1a357aa0cb6ef
-
SHA256
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9
-
SHA512
f7890bbf09ed79c735e6b7c9317c8817a2f1905b462b280682245f43343c0198eaf9b0ffab0d83a7b585d7059cfa6153d8a23be32ebd1df9ca92180eaa8db8e0
-
SSDEEP
24576:2R3PeJwiDT9xwiSGp2oxVhD8ok/Q/iHFtnoBYa1agxGSExShE:o2wmFkoqHsYafsxxShE
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exedescription ioc process File opened for modification \??\PhysicalDrive0 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exepid process 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe 584 7181737a83d0a7badc25fb6d3246d5db9e1bf8c2bfbbf39c73c8a8c1662eadf9.exe