Overview

overview

10

Static

static

10

Bootkits/5...1a.exe

windows7-x64

1

Bootkits/5...1a.exe

windows10-2004-x64

6

Bootkits/6...86.exe

windows7-x64

7

Bootkits/6...86.exe

windows10-2004-x64

7

Bootkits/8...f6.msi

windows7-x64

7

Bootkits/8...f6.msi

windows10-2004-x64

7

Bootkits/f...b1.exe

windows7-x64

7

Bootkits/f...b1.exe

windows10-2004-x64

Rootkits/0...c7.exe

windows7-x64

8

Rootkits/0...c7.exe

windows10-2004-x64

8

Rootkits/0...6d.exe

windows7-x64

10

Rootkits/0...6d.exe

windows10-2004-x64

1

Rootkits/0...ae.exe

windows7-x64

1

Rootkits/0...ae.exe

windows10-2004-x64

1

Rootkits/0...3e.exe

windows7-x64

7

Rootkits/0...3e.exe

windows10-2004-x64

10

Rootkits/0...10.exe

windows7-x64

7

Rootkits/0...10.exe

windows10-2004-x64

7

Rootkits/2...8e.dll

windows7-x64

1

Rootkits/2...8e.dll

windows10-2004-x64

1

Rootkits/2...a4.exe

windows7-x64

10

Rootkits/2...a4.exe

windows10-2004-x64

Rootkits/4...1b.exe

windows7-x64

7

Rootkits/4...1b.exe

windows10-2004-x64

7

Rootkits/6...d9.exe

windows7-x64

1

Rootkits/6...d9.exe

windows10-2004-x64

1

Rootkits/7...e8.exe

windows7-x64

7

Rootkits/7...e8.exe

windows10-2004-x64

7

Rootkits/8...22.exe

windows7-x64

1

Rootkits/8...22.exe

windows10-2004-x64

1

Rootkits/9...99.exe

windows7-x64

8

Rootkits/9...99.exe

windows10-2004-x64

8

Analysis

  • max time kernel
    240s
  • max time network
    305s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    08-11-2023 03:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Rootkits/659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9.exe

  • Size

    9KB

  • MD5

    83720e64aa1388d55324a22536bd39cd

  • SHA1

    8fa3636a7697f953d7daa02a313981b9e3bc98e4

  • SHA256

    659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9

  • SHA512

    0ab402911cdefceb9a6ade0b968b10c628fed6da17097b8cd943f76527078a597425c8d0845bb86f0318ee1967dd3f43aa951f822b79933da475eb1ace70922d

  • SSDEEP

    192:V06wXINaG3GO/p/gqEQ3UCp3syXOYWmvmKI7H:VnNt/1gG3Hp3ToUjI7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Rootkits\659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9.exe
    "C:\Users\Admin\AppData\Local\Temp\Rootkits\659e0d1b2405cadfa560fe648cbf6866720dd40bb6f4081d3dce2dffe20595d9.exe"
    1⤵
    • Suspicious behavior: LoadsDriver
    • Suspicious use of AdjustPrivilegeToken
    PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads