Analysis

  • max time kernel
    149s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    04-11-2023 08:19

General

  • Target

    NEAS.7839b9a0a19050549e70a6f6d9401b60.exe

  • Size

    532KB

  • MD5

    7839b9a0a19050549e70a6f6d9401b60

  • SHA1

    b74c22e4475b97ea191c07b815fe0204577f4a44

  • SHA256

    ce2a3344563f747894a4ac72c6537f3b4c82113521e84fddc04d83170d160afd

  • SHA512

    41c51239a7649f915805dfc9229999467365967d5e57b045762970ca45e1d278db7510889cac9ee81bcdc6fadc6a585eaf441c90c9ace917f9720c58a50c864e

  • SSDEEP

    12288:8y/ppKusYKWYaNc+LG8nUIx4C394VXuULgXyZMpv7KoVEw:l/OTWVfG8nUIp9pUQpv7Ko2w

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\NEAS.7839b9a0a19050549e70a6f6d9401b60.exe
    "C:\Users\Admin\AppData\Local\Temp\NEAS.7839b9a0a19050549e70a6f6d9401b60.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1580-1-0x0000000000250000-0x0000000000350000-memory.dmp

    Filesize

    1024KB

  • memory/1580-2-0x0000000000810000-0x000000000087B000-memory.dmp

    Filesize

    428KB

  • memory/1580-3-0x0000000000400000-0x000000000080E000-memory.dmp

    Filesize

    4.1MB

  • memory/1580-4-0x0000000000400000-0x000000000080E000-memory.dmp

    Filesize

    4.1MB

  • memory/1580-5-0x0000000000250000-0x0000000000350000-memory.dmp

    Filesize

    1024KB

  • memory/1580-6-0x0000000000400000-0x000000000080E000-memory.dmp

    Filesize

    4.1MB

  • memory/1580-7-0x0000000000810000-0x000000000087B000-memory.dmp

    Filesize

    428KB