Analysis
-
max time kernel
140s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
12/10/2023, 11:23
General
-
Target
cd504cf99c82e689d9721ad15568b84ac0874d246f630c922957280faf2dc34f.exe
-
Size
200KB
-
MD5
21360267f428526dc1d96b658fa8ea0b
-
SHA1
caadc883c09dc8bfbc26855133f3170a5dcc503c
-
SHA256
cd504cf99c82e689d9721ad15568b84ac0874d246f630c922957280faf2dc34f
-
SHA512
d7bd6132b691991455557114a6f7050c666586010503c088de8526345fd193e35c535e400a6e76ccbb39d925c5e822e2b8be163ae9b7ed0f2c17acfc87af1903
-
SSDEEP
3072:7GW6mdM7UyJHwkiTpP9Kof1BP+lGIkn6dwyq1Xt9ogaurt4K5:7p07UyJHwRpfP2Wy2frD
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd504cf99c82e689d9721ad15568b84ac0874d246f630c922957280faf2dc34f.exe"C:\Users\Admin\AppData\Local\Temp\cd504cf99c82e689d9721ad15568b84ac0874d246f630c922957280faf2dc34f.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx