Analysis
-
max time kernel
1s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
27-11-2022 15:52
Static task
static1
Behavioral task
behavioral1
Sample
6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719.exe
Resource
win10v2004-20220812-en
General
-
Target
6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719.exe
-
Size
1.6MB
-
MD5
efdfa2cf32dc73ba74818e022a86e39f
-
SHA1
e3897a60efc7d9162009fe3e45e7a403ad81915f
-
SHA256
6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719
-
SHA512
38995b6ca172bc22aad642e5e7191335aa4a33490869f9e324208c456c69db1482925e361d6bfdc118058dd5413087986de4466ccb326c95cecb793b26983bb8
-
SSDEEP
24576:JhSIFQ5jJCNThZcK1KM0ZqevQOa8qYO7A56JHQWtLNAvRck9LFW4UQvhWSai2+k2:Jh0dIZpsSevQOmo2AZck9/Qd4evkNn9
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719.exedescription ioc process File opened for modification \??\PhysicalDrive0 6b5b6809c1512620b71383a74e11dbcb33c0fd7710ad3639a2416842576f4719.exe
Processes
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1220-54-0x0000000075141000-0x0000000075143000-memory.dmpFilesize
8KB