Analysis
-
max time kernel
148s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12-10-2023 05:27
General
-
Target
cc3d9ba3f232eff6ea6cbe0d639e9571d36eccee4b2cc5d6ad00d306cc110e63.exe
-
Size
4.5MB
-
MD5
f88df5ac9aa1dbe9a8dfdca2592993a3
-
SHA1
c072917c60819e69a3c68d9bf31b3e08c3d2947d
-
SHA256
cc3d9ba3f232eff6ea6cbe0d639e9571d36eccee4b2cc5d6ad00d306cc110e63
-
SHA512
b97554d0024b1ebd5e03afc12d4cc0595da95c6f9d93930ee18eb7f62a160ddd76bdc055e640ce7ab4e14999279961a08a55f71d939650241c378f2f13fec88b
-
SSDEEP
49152:vIpCv6s8YFwjaVrY45hAiL/bUgBXhhQnlLSo9uvACZ91I7Ja93pKAes7w6cvkf:A8rX5hAibbbBTSlLSo8vAC/npKHpl2
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cc3d9ba3f232eff6ea6cbe0d639e9571d36eccee4b2cc5d6ad00d306cc110e63.exe"C:\Users\Admin\AppData\Local\Temp\cc3d9ba3f232eff6ea6cbe0d639e9571d36eccee4b2cc5d6ad00d306cc110e63.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx