Analysis
-
max time kernel
214s -
max time network
230s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
13/10/2023, 05:52
General
-
Target
bb7e70f20d833265427e243c38d21668a7d8e9f0a82a29b142df9c6617c0bc0b.exe
-
Size
1.1MB
-
MD5
c56f85ae3c9ade7e91b361424c66d2a3
-
SHA1
1b18a2196ebb1b34326f0699690c7469b37ec281
-
SHA256
bb7e70f20d833265427e243c38d21668a7d8e9f0a82a29b142df9c6617c0bc0b
-
SHA512
cd15067ba568f2fa0400e713d20cd55d005acc954fddacd00324330f8a4d8f3630b22534bcb2838ddbcb6b89b7367ca8a7a9f25a81333a7e5abdc195b12537e6
-
SSDEEP
24576:fJoipzzhbDRrBBibuqPIxtYPNgV+N57UNV12GmrfdBnCR/sdY2wBdv:fJdzzhBSbuiInYPXnk29rfTm2wBd
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\bb7e70f20d833265427e243c38d21668a7d8e9f0a82a29b142df9c6617c0bc0b.exe"C:\Users\Admin\AppData\Local\Temp\bb7e70f20d833265427e243c38d21668a7d8e9f0a82a29b142df9c6617c0bc0b.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.8MB