Analysis

  • max time kernel
    142s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231020-en
  • resource tags

    arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
  • submitted
    14/11/2023, 11:37

General

  • Target

    9146aca8ce00f71273f71223cbff02f9f21e2120f819163a9d174f04ebb567d9.exe

  • Size

    1.3MB

  • MD5

    ac76cfc4f6b0d327ee641e3781b6776a

  • SHA1

    4ced8ba857907510e9b4ba9d9764a0f84f63bad9

  • SHA256

    9146aca8ce00f71273f71223cbff02f9f21e2120f819163a9d174f04ebb567d9

  • SHA512

    91e96d4facd8d7bfd7b2145d942642095f1ef7414d057870166734f6e8656eaad9d33599b21662bd200e3dedf250f219361c16f9465412e90faa022ca6ee3736

  • SSDEEP

    24576:pTOO8r0/MIXIw68b2C76LCU93/c3sowzTkP9Wk4zuXFy1SdY0pK7+2SBhHX6rJ:dOVw3XOjG3SCbXFy1qc7NyHX6r

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9146aca8ce00f71273f71223cbff02f9f21e2120f819163a9d174f04ebb567d9.exe
    "C:\Users\Admin\AppData\Local\Temp\9146aca8ce00f71273f71223cbff02f9f21e2120f819163a9d174f04ebb567d9.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Suspicious use of SetWindowsHookEx
    PID:1212

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1212-0-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-1-0x0000000000260000-0x0000000000263000-memory.dmp

          Filesize

          12KB

        • memory/1212-2-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-3-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-4-0x0000000000260000-0x0000000000263000-memory.dmp

          Filesize

          12KB

        • memory/1212-5-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-6-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-7-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-8-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-9-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-10-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-11-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-12-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-13-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-14-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-15-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB

        • memory/1212-16-0x0000000000400000-0x000000000091B000-memory.dmp

          Filesize

          5.1MB