Analysis
-
max time kernel
141s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
12/11/2023, 22:45
Static task
static1
Behavioral task
behavioral1
Sample
9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe
Resource
win10v2004-20231023-en
General
-
Target
9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe
-
Size
2.0MB
-
MD5
2656946d903015ddbaacae7d7d071561
-
SHA1
74c23ac7ed0094a3d681045d9b9de9aaab7f9794
-
SHA256
9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78
-
SHA512
e00845c28eae9dbd17e19e85f30319eb90ce0b26e3ef1206d502eeddbddaf6ffe8e6694413c2967311dd32606fb36119b7632dd3a163d69ac0937951a2246ffc
-
SSDEEP
24576:sBENH7HHSzy5RsB3WuBMSY6dCnW1ikF99yQKZFXRuK2Rg6mUKkYjy85LsM4gW8TO:aFuSRMnWskF9IpwYLTmd86WM0G
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2244 9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe"C:\Users\Admin\AppData\Local\Temp\9ac4415af804b361ae96d686f5198754d79a4fc682fb2e26ec722658cc31ad78.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: GetForegroundWindowSpam
PID:2244