Analysis

  • max time kernel
    45s
  • max time network
    64s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    03-12-2022 18:22

General

  • Target

    26800915f6ec6e7c9eb79acb7c7fddd111da46ae93eba81777afed832172bf2f.exe

  • Size

    1.8MB

  • MD5

    40659d464a616b687dd290e3fbf53c6e

  • SHA1

    c6b81d65a2f5dbe6a7c9ddf40d9fbc31cf86063d

  • SHA256

    26800915f6ec6e7c9eb79acb7c7fddd111da46ae93eba81777afed832172bf2f

  • SHA512

    0330516c8b918108e674f993380024a3793147788915e72191fe64b2f58556f430521b970ab468915d290e6198a34f21d26e9515fea42e1dae0cf418c82fbe43

  • SSDEEP

    49152:gGFQaiH0Ym7XUUTrY8V6+PKulzuswv5U4ch:fFaUYmjl0KBzmU5

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\26800915f6ec6e7c9eb79acb7c7fddd111da46ae93eba81777afed832172bf2f.exe
    "C:\Users\Admin\AppData\Local\Temp\26800915f6ec6e7c9eb79acb7c7fddd111da46ae93eba81777afed832172bf2f.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1900-54-0x0000000000400000-0x00000000005CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1900-56-0x0000000075C00000-0x0000000075C47000-memory.dmp

    Filesize

    284KB

  • memory/1900-57-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-60-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-62-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-66-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-68-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-70-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-72-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-76-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-78-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-80-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-82-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-86-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-88-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-92-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-96-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-98-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-102-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-104-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-108-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-110-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-114-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-118-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-116-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-112-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-106-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-100-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-94-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-90-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-84-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-74-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-64-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-58-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-1740-0x0000000002020000-0x00000000021A0000-memory.dmp

    Filesize

    1.5MB

  • memory/1900-3664-0x0000000000400000-0x00000000005CD000-memory.dmp

    Filesize

    1.8MB

  • memory/1900-5661-0x0000000000670000-0x000000000069A000-memory.dmp

    Filesize

    168KB

  • memory/1900-5662-0x00000000022A0000-0x0000000002390000-memory.dmp

    Filesize

    960KB

  • memory/1900-5663-0x0000000000620000-0x0000000000667000-memory.dmp

    Filesize

    284KB

  • memory/1900-5664-0x00000000021A0000-0x00000000022A0000-memory.dmp

    Filesize

    1024KB