Analysis
-
max time kernel
0s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 09:28
Behavioral task
behavioral1
Sample
1484ce7e3deb4bfdfacab3489cc72681.exe
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1484ce7e3deb4bfdfacab3489cc72681.exe
Resource
win10v2004-20231215-en
2 signatures
150 seconds
General
-
Target
1484ce7e3deb4bfdfacab3489cc72681.exe
-
Size
307KB
-
MD5
1484ce7e3deb4bfdfacab3489cc72681
-
SHA1
44ad42b08ad12b0b3bf7a61bd47b86d252f188f8
-
SHA256
15feae07cb772cb1498137a3c86b79b921b15b4c91cc563f7fe1df942228521f
-
SHA512
df6a8891b02c0a02785b910532ff1fe06be3eadd10657b8f2423c8ca264de399673566cf5eb40bbf05312f726f18002432e6e691fcc5b053d08cb4e9118cb9b1
-
SSDEEP
6144:uPE7WiLnLz6fwoVx2hUdM0cAr2ncLUrZG4yea7GXdTMJ/jooOiB:yE7WeSTVx2hUUmQrZG4yeQGX9M9OiB
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/2992-0-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral2/memory/2992-11-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral2/memory/2992-17-0x0000000000400000-0x00000000004B7000-memory.dmp upx -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 1484ce7e3deb4bfdfacab3489cc72681.exe