Analysis

  • max time kernel
    144s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2023, 15:34

General

  • Target

    fdf8ee203b9092c1d0b74e4ef68999a53cbae0fd4a3115375a96782e49cc7960.exe

  • Size

    517KB

  • MD5

    662f26192f689f6c89d5039928586f05

  • SHA1

    3483478bcf245d5852dc4248d5a9366c738e120e

  • SHA256

    fdf8ee203b9092c1d0b74e4ef68999a53cbae0fd4a3115375a96782e49cc7960

  • SHA512

    8f63cfc5dc8fb4bc0529c67905cd3192f36c8f77436824f52199179ac0619800abc0ef32392fa2eb89cdaafcc92d713606853a7f64b8c19e64f0d225b15e8b04

  • SSDEEP

    12288:7P4I8Lp7jXbjJEkTRJIjXrwrChB5XXo9rIyGKLN:7q5jXbGkUtX/+

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fdf8ee203b9092c1d0b74e4ef68999a53cbae0fd4a3115375a96782e49cc7960.exe
    "C:\Users\Admin\AppData\Local\Temp\fdf8ee203b9092c1d0b74e4ef68999a53cbae0fd4a3115375a96782e49cc7960.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1080-1-0x00000000008D0000-0x00000000009D0000-memory.dmp

    Filesize

    1024KB

  • memory/1080-2-0x00000000002F0000-0x000000000035B000-memory.dmp

    Filesize

    428KB

  • memory/1080-3-0x0000000000400000-0x000000000080B000-memory.dmp

    Filesize

    4.0MB

  • memory/1080-4-0x0000000000400000-0x000000000080B000-memory.dmp

    Filesize

    4.0MB

  • memory/1080-5-0x00000000008D0000-0x00000000009D0000-memory.dmp

    Filesize

    1024KB

  • memory/1080-6-0x0000000000400000-0x000000000080B000-memory.dmp

    Filesize

    4.0MB

  • memory/1080-7-0x00000000002F0000-0x000000000035B000-memory.dmp

    Filesize

    428KB