Analysis
-
max time kernel
1s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 10:39
Static task
static1
Behavioral task
behavioral1
Sample
6800b1ea737a6731c322f89b2b3ce855.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6800b1ea737a6731c322f89b2b3ce855.exe
Resource
win10v2004-20231215-en
General
-
Target
6800b1ea737a6731c322f89b2b3ce855.exe
-
Size
843KB
-
MD5
6800b1ea737a6731c322f89b2b3ce855
-
SHA1
e5d1c4f6fdf2a179fc42a1b7de932006b7580103
-
SHA256
1c6257d9684b54eaff7c9c4c2141656854255fa8a32ab715d459eb76e588f110
-
SHA512
9504021ca9021d94831377ccc015c74772c9b333522c2be44f655e743a75291076dc3d498e2257cf6dbfb87d588e8a3c830e74c0e080c681d594bda6ba8caada
-
SSDEEP
24576:/WkfZmRDbzyQHvDgcIjr6DAlKzINaeywln:/bib3HvsHV5Naeywln
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 6800b1ea737a6731c322f89b2b3ce855.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).