Analysis
-
max time kernel
141s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
24-10-2023 07:42
General
-
Target
2bc3484ee761df3a7c97360fc6482ff8fdd39339a5785d08e473a70ef7c49ffc.exe
-
Size
904KB
-
MD5
e554377da218e4a1199893b65b383934
-
SHA1
d2a033fc77175bb88747a8898d41b7405f3497ce
-
SHA256
2bc3484ee761df3a7c97360fc6482ff8fdd39339a5785d08e473a70ef7c49ffc
-
SHA512
1d5e3dcb7d293956e7c4e8491c68d172dedab48757eca11b7a8cd7f7c78fd3eff9e69b832c7734f9cc0bcae8aefc12e9b28a8b31274506ed9f9819134b9edf5b
-
SSDEEP
24576:2E6RHsK1zVp4+a+gom4XDNKbbAeJjjyvNdLv0d3:2E6RHsK1MoCAeY1dv2
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2bc3484ee761df3a7c97360fc6482ff8fdd39339a5785d08e473a70ef7c49ffc.exe"C:\Users\Admin\AppData\Local\Temp\2bc3484ee761df3a7c97360fc6482ff8fdd39339a5785d08e473a70ef7c49ffc.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx