Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
02-09-2023 12:02
General
-
Target
29a2804ab4affbae32da25111770eff553a6615bc4968c7aa15a9935b1dd5b13.exe
-
Size
1.0MB
-
MD5
41d2282a12b785ddd43cd116ac82928e
-
SHA1
6705b3d473d8d71443b8d94c569e74a47988f1a9
-
SHA256
29a2804ab4affbae32da25111770eff553a6615bc4968c7aa15a9935b1dd5b13
-
SHA512
8683d803184163fbf281a07d9877269cb40a8321ab3967654a1b56fda0312ec1de738426b24d7fc0cce85c10c321808618162d8bc7324ce784d1a875cdfecbf3
-
SSDEEP
24576:u/kWzZIuKQ40fovFqOIXXycpJ0YRUfelaF/:u/bzZIuy0fobcXxpJ5Uv1
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\29a2804ab4affbae32da25111770eff553a6615bc4968c7aa15a9935b1dd5b13.exe"C:\Users\Admin\AppData\Local\Temp\29a2804ab4affbae32da25111770eff553a6615bc4968c7aa15a9935b1dd5b13.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx