Analysis

  • max time kernel
    291s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20230824-en
  • resource tags

    arch:x64arch:x86image:win7-20230824-enlocale:en-usos:windows7-x64system
  • submitted
    27/08/2023, 04:48

General

  • Target

    898b1bfc632ef8a9ecef1b30e3ef9faf1e1abb85c40995d7b21ab6239ae34a9f.exe

  • Size

    579KB

  • MD5

    4f173fd1fedad0a73517500d43363f1a

  • SHA1

    5ba911babca20b17dd94805b58e1ff8d8c14eed0

  • SHA256

    898b1bfc632ef8a9ecef1b30e3ef9faf1e1abb85c40995d7b21ab6239ae34a9f

  • SHA512

    9bdee9993ff11b4e161811a431d9a3ec755dd62763b84dc7dfbe5c4a7f86bd329f2d39862e7a4e1bbbd163def90b90dbfe26d249d73070dd1df3543cf25cdbfd

  • SSDEEP

    12288:OdoOshtX2MA0asC4uSJaFRTGQWWyGLGnWTTx1INz8U9G:OiH5K0nKCk5Gj5nkf6IU4

Score
10/10

Malware Config

Signatures

  • Pitou 2 IoCs

    Pitou.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\898b1bfc632ef8a9ecef1b30e3ef9faf1e1abb85c40995d7b21ab6239ae34a9f.exe
    "C:\Users\Admin\AppData\Local\Temp\898b1bfc632ef8a9ecef1b30e3ef9faf1e1abb85c40995d7b21ab6239ae34a9f.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2780-0-0x0000000002610000-0x0000000002670000-memory.dmp

    Filesize

    384KB

  • memory/2780-1-0x00000000026F0000-0x000000000275B000-memory.dmp

    Filesize

    428KB

  • memory/2780-3-0x0000000000400000-0x0000000002480000-memory.dmp

    Filesize

    32.5MB

  • memory/2780-2-0x0000000000400000-0x0000000002480000-memory.dmp

    Filesize

    32.5MB

  • memory/2780-4-0x0000000002610000-0x0000000002670000-memory.dmp

    Filesize

    384KB

  • memory/2780-5-0x0000000000400000-0x0000000002480000-memory.dmp

    Filesize

    32.5MB

  • memory/2780-6-0x00000000026F0000-0x000000000275B000-memory.dmp

    Filesize

    428KB