Analysis
-
max time kernel
1s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
25/12/2023, 17:37
General
-
Target
316d53a646d3be7debe0eaf13fd4c629.exe
-
Size
203KB
-
MD5
316d53a646d3be7debe0eaf13fd4c629
-
SHA1
137f0b470cae283812a5766ad74a0ff912de6261
-
SHA256
e35445ac1016c443220c2b2030c704c67c44a06d8adbe62ffa4161f3ec6c8b84
-
SHA512
9e408dde3e6ee802ca9f69da756add0f21f40c79d772a93ef680a8553224bb2a87aed3f263a39929a458b12f4dae7799932417f3426abc55692505b43ceed05d
-
SSDEEP
6144:p7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfR4m3+N:p78AqbaVcmAo7cGNpwCi+eQZ7q
Score
7/10
Malware Config
Signatures
-
UPX packed file 5 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates connected drives 3 TTPs 21 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\316d53a646d3be7debe0eaf13fd4c629.exe"C:\Users\Admin\AppData\Local\Temp\316d53a646d3be7debe0eaf13fd4c629.exe"1⤵
- Enumerates connected drives
- Writes to the Master Boot Record (MBR)
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB
-
Filesize
476KB