Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
08/10/2023, 21:51
General
-
Target
27fbd85f103d765b314af7944415d5e85c9598e949ddd575fd051ace158c7039.exe
-
Size
4.2MB
-
MD5
859201786125cc0899670163aa7c2952
-
SHA1
0e3d76cff68449054f80a77e22c9aab3b8c75f86
-
SHA256
27fbd85f103d765b314af7944415d5e85c9598e949ddd575fd051ace158c7039
-
SHA512
d58335bf28cad64102cfcb533b54221a504aabfa831bc031201d258de1d1e06b046a61e8ef353d49c7bbbf8a3a56f7bf23cffeb3d2734e75aa0bbecbdf5d78c3
-
SSDEEP
98304:2Kd7Rml+D6qvAZKxvz9PwmyMvbvgRCxVlhkhylpYmX1:jRl6Z+homVz6WVLeIi+1
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\27fbd85f103d765b314af7944415d5e85c9598e949ddd575fd051ace158c7039.exe"C:\Users\Admin\AppData\Local\Temp\27fbd85f103d765b314af7944415d5e85c9598e949ddd575fd051ace158c7039.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of NtSetInformationThreadHideFromDebugger
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.4MB
-
Filesize
844KB
-
Filesize
6.4MB
-
Filesize
844KB