Analysis
-
max time kernel
291s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
27/08/2023, 04:47
Static task
static1
Behavioral task
behavioral1
Sample
2033c780a3929f7993f42c37d5fca5b1f986bf5488cd0f1af648dc81a2cbf278.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2033c780a3929f7993f42c37d5fca5b1f986bf5488cd0f1af648dc81a2cbf278.exe
Resource
win10-20230703-en
General
-
Target
2033c780a3929f7993f42c37d5fca5b1f986bf5488cd0f1af648dc81a2cbf278.exe
-
Size
594KB
-
MD5
7b7a0ea96e705da8b0bdedcfa16632cf
-
SHA1
a765852add62805ea6ae817a787cdf2574a7479c
-
SHA256
2033c780a3929f7993f42c37d5fca5b1f986bf5488cd0f1af648dc81a2cbf278
-
SHA512
6792a07a5ea431ffd9301a775084e211f4e185c26e3be9eb37f948f003005d0d47e899a14c27b79a53b478013573403ce441e0d31ffd4656372b291e2fb40d34
-
SSDEEP
12288:v/gLY00D/lw89pmJkIV5PeYiQuhZEoxAOYfkVcf8mLTc/1Ih/:vEUlwcmJk052guhGoenXf8mLTcNIh/
Malware Config
Signatures
-
Pitou 2 IoCs
Pitou.
resource yara_rule behavioral1/memory/1700-2-0x0000000000400000-0x0000000002483000-memory.dmp pitou behavioral1/memory/1700-4-0x0000000000400000-0x0000000002483000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 2033c780a3929f7993f42c37d5fca5b1f986bf5488cd0f1af648dc81a2cbf278.exe