Analysis
-
max time kernel
31s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
29/03/2023, 21:55
General
-
Target
ff04556361f2be1e6c29af348cd2c2f92ba5f6538daf553c21a3efeaeeeea84a.exe
-
Size
1.8MB
-
MD5
62997c4cc33859fed79e3f16ac4dc7fe
-
SHA1
42d695530b792a09f6897544a8e1658cdc67defe
-
SHA256
ff04556361f2be1e6c29af348cd2c2f92ba5f6538daf553c21a3efeaeeeea84a
-
SHA512
ee2c7f5efee247e54a0bc84d4d5ad6903566c704ad59e02f07466cbe6d738c319a258c1daeff5b3dfd65ff9921ca18668f2311def849840a08c5e57adf1db127
-
SSDEEP
24576:ci4TDZJc7QvytUvg4I7+DKAuomLoImb9UoZjknxke2AsONRFIbPmbtl:D4UCI7+D23LR29Uoyxke2AzgPmh
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ff04556361f2be1e6c29af348cd2c2f92ba5f6538daf553c21a3efeaeeeea84a.exe"C:\Users\Admin\AppData\Local\Temp\ff04556361f2be1e6c29af348cd2c2f92ba5f6538daf553c21a3efeaeeeea84a.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB
-
Filesize
4KB