Analysis
-
max time kernel
149s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
04-11-2023 08:19
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.7839b9a0a19050549e70a6f6d9401b60.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.7839b9a0a19050549e70a6f6d9401b60.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.7839b9a0a19050549e70a6f6d9401b60.exe
-
Size
532KB
-
MD5
7839b9a0a19050549e70a6f6d9401b60
-
SHA1
b74c22e4475b97ea191c07b815fe0204577f4a44
-
SHA256
ce2a3344563f747894a4ac72c6537f3b4c82113521e84fddc04d83170d160afd
-
SHA512
41c51239a7649f915805dfc9229999467365967d5e57b045762970ca45e1d278db7510889cac9ee81bcdc6fadc6a585eaf441c90c9ace917f9720c58a50c864e
-
SSDEEP
12288:8y/ppKusYKWYaNc+LG8nUIx4C394VXuULgXyZMpv7KoVEw:l/OTWVfG8nUIp9pUQpv7Ko2w
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 NEAS.7839b9a0a19050549e70a6f6d9401b60.exe