Analysis

  • max time kernel
    186s
  • max time network
    200s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30-12-2023 00:41

General

  • Target

    08d589f906f206e7774c842019a308ca.exe

  • Size

    573KB

  • MD5

    08d589f906f206e7774c842019a308ca

  • SHA1

    064ab457feb37b39d2d96f1ef8e364bf6cfa0ab5

  • SHA256

    c07438f18e34fa46fb4f533a3899b1cd6b7cd3a4a6b71e32969a63be397b1fef

  • SHA512

    8baa38f9f234e082636e5e55e9008ccda340ef02dbf16ecaeea6659147eaa24884fe8633d2d4ad08bd2b73f317c4fc5cbc89eada28f24356166b97de4d5761e3

  • SSDEEP

    12288:aPpGHQBRQVw6JVISwFCUDZLRjtoUD2Zl0dJuTZBHfG:aQH8RQeYVcFxLRvzdJcZZO

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\08d589f906f206e7774c842019a308ca.exe
    "C:\Users\Admin\AppData\Local\Temp\08d589f906f206e7774c842019a308ca.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2248-0-0x0000000000400000-0x0000000000490000-memory.dmp

    Filesize

    576KB

  • memory/2248-1-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-42-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-43-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-45-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-48-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-49-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-52-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-60-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-74-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-120-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-141-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-139-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-142-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-144-0x0000000000400000-0x0000000000490000-memory.dmp

    Filesize

    576KB

  • memory/2248-147-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-157-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-166-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-214-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-211-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-290-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-294-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-303-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-305-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-309-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-340-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-351-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-381-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-388-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-389-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-391-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-433-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-439-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-443-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-446-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-445-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-448-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-472-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-475-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-477-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-479-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-481-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-483-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-509-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-516-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-518-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-547-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-1047-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-1050-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-1051-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB

  • memory/2248-1052-0x0000000002E70000-0x0000000002F1A000-memory.dmp

    Filesize

    680KB