Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
21-11-2023 03:06
General
-
Target
4ff2a11a9ce136e4ea0902df4802f8e9f92bfc4259cf72009bec2bdb865184d2.exe
-
Size
3.8MB
-
MD5
b02611f0ea82633d6a448f13dd29a3e8
-
SHA1
cc663d95ad11d8bfc54a8bf2f01188f71d33ee0d
-
SHA256
4ff2a11a9ce136e4ea0902df4802f8e9f92bfc4259cf72009bec2bdb865184d2
-
SHA512
d4fce33d6a9b460eef90b36d64fdeb5d86dd1b1cc04b407c2b8d0890bab3a26988a1d1e3e6b80e34e2a421001f0e48bb1f3922778637024b5025f82014b481d5
-
SSDEEP
98304:VQjFelG4/SSmkgnkhBzYNKltE6lFmhLlzp503H:aQSRknc8ltEgCLl7i
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ff2a11a9ce136e4ea0902df4802f8e9f92bfc4259cf72009bec2bdb865184d2.exe"C:\Users\Admin\AppData\Local\Temp\4ff2a11a9ce136e4ea0902df4802f8e9f92bfc4259cf72009bec2bdb865184d2.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of SetWindowsHookEx