Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 01:23

General

  • Target

    09fada8e4d4b04343b54c6b3e6ea33e9.exe

  • Size

    502KB

  • MD5

    09fada8e4d4b04343b54c6b3e6ea33e9

  • SHA1

    2c2027d6f5ba9fa3c668f9f69d7acea1aa65e768

  • SHA256

    b69c33161fefbf7d198fc294a2cd861f3c62665ae6068e2a6ce5bca9aeaf01c8

  • SHA512

    e949efb08a243c06dd854733c5d23032ee6a57b198c2076c52975564a287fbdb4ea57ec3c3a898bb473f7b304af6521f1dbcfddef1279d23a192ffdf6af740fb

  • SSDEEP

    12288:p4n2OBMFSePiW0ZPh9XqZRml9VtNtTirdsJ:pGuSiiWYXEmDVZTEd4

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\09fada8e4d4b04343b54c6b3e6ea33e9.exe
    "C:\Users\Admin\AppData\Local\Temp\09fada8e4d4b04343b54c6b3e6ea33e9.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2996

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2996-0-0x0000000000400000-0x000000000048C000-memory.dmp

          Filesize

          560KB

        • memory/2996-1-0x0000000000490000-0x00000000004D3000-memory.dmp

          Filesize

          268KB

        • memory/2996-2-0x00000000004E0000-0x00000000004E1000-memory.dmp

          Filesize

          4KB

        • memory/2996-5-0x00000000003C0000-0x00000000003C1000-memory.dmp

          Filesize

          4KB

        • memory/2996-4-0x0000000000240000-0x0000000000241000-memory.dmp

          Filesize

          4KB

        • memory/2996-8-0x0000000000360000-0x0000000000361000-memory.dmp

          Filesize

          4KB

        • memory/2996-7-0x00000000003A0000-0x00000000003A1000-memory.dmp

          Filesize

          4KB

        • memory/2996-6-0x00000000003B0000-0x00000000003B1000-memory.dmp

          Filesize

          4KB

        • memory/2996-3-0x0000000000250000-0x0000000000251000-memory.dmp

          Filesize

          4KB

        • memory/2996-9-0x00000000003E0000-0x00000000003E1000-memory.dmp

          Filesize

          4KB

        • memory/2996-14-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

          Filesize

          4KB

        • memory/2996-13-0x0000000000530000-0x0000000000532000-memory.dmp

          Filesize

          8KB

        • memory/2996-12-0x0000000001D60000-0x0000000001D63000-memory.dmp

          Filesize

          12KB

        • memory/2996-11-0x0000000000500000-0x0000000000501000-memory.dmp

          Filesize

          4KB

        • memory/2996-10-0x0000000000390000-0x0000000000391000-memory.dmp

          Filesize

          4KB

        • memory/2996-15-0x0000000001E00000-0x0000000001E01000-memory.dmp

          Filesize

          4KB

        • memory/2996-17-0x0000000000400000-0x000000000048C000-memory.dmp

          Filesize

          560KB

        • memory/2996-16-0x0000000001D70000-0x0000000001D71000-memory.dmp

          Filesize

          4KB

        • memory/2996-19-0x0000000000490000-0x00000000004D3000-memory.dmp

          Filesize

          268KB

        • memory/2996-18-0x0000000000510000-0x0000000000511000-memory.dmp

          Filesize

          4KB

        • memory/2996-20-0x0000000000520000-0x0000000000521000-memory.dmp

          Filesize

          4KB