Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 02:52

General

  • Target

    0c38405eb475b19e2fe13e7b0e384aba.exe

  • Size

    118KB

  • MD5

    0c38405eb475b19e2fe13e7b0e384aba

  • SHA1

    06b06c205c20b962b8965c47ccafb8d4b2acc6d8

  • SHA256

    243961d748553f967421ecbde0fbb8d3bf2c24c001a6ce4519a3d1aeb59e9938

  • SHA512

    a29725b6364f0a8fb4f200f3d85842c3964203b4da0496ebd0ff127636839a885877bf1dd8f3a828a8662ba9d57bebb9eed09e5ef32b8ab3da889e98c1ee748a

  • SSDEEP

    3072:mf3WH0ZbbrMbvT0q8O1cZPzQ7IXMBc+AMP+QfQEhxFyVU7GjJ:mf3c0BwvP6bQ7yMP+DE827sJ

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Modifies registry class 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0c38405eb475b19e2fe13e7b0e384aba.exe
    "C:\Users\Admin\AppData\Local\Temp\0c38405eb475b19e2fe13e7b0e384aba.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    • Modifies registry class
    PID:1276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1276-2-0x0000000000300000-0x0000000000302000-memory.dmp

    Filesize

    8KB

  • memory/1276-8-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1276-7-0x0000000000370000-0x0000000000371000-memory.dmp

    Filesize

    4KB

  • memory/1276-6-0x0000000001DF0000-0x0000000001DF1000-memory.dmp

    Filesize

    4KB

  • memory/1276-5-0x0000000001E00000-0x0000000001E01000-memory.dmp

    Filesize

    4KB

  • memory/1276-4-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/1276-1-0x00000000002D0000-0x0000000000300000-memory.dmp

    Filesize

    192KB

  • memory/1276-0-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB

  • memory/1276-12-0x00000000002D0000-0x0000000000300000-memory.dmp

    Filesize

    192KB

  • memory/1276-11-0x0000000000400000-0x0000000000423000-memory.dmp

    Filesize

    140KB

  • memory/1276-10-0x0000000000380000-0x0000000000381000-memory.dmp

    Filesize

    4KB

  • memory/1276-9-0x0000000000390000-0x0000000000391000-memory.dmp

    Filesize

    4KB