Analysis

  • max time kernel
    2s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    31-12-2023 14:19

General

  • Target

    39973a2c33927b85cde6bbaab75d1bfb.exe

  • Size

    844KB

  • MD5

    39973a2c33927b85cde6bbaab75d1bfb

  • SHA1

    ac9e00e3f2936896075c68753327cd11a51e9762

  • SHA256

    2a3c749fee003fe59402fe41297441d6706225d3f9d2da7b45fc7b1dba870990

  • SHA512

    7f7057f8b19ade8360d93e997aa2a278a285b546f4cd0d5437606937f62eda6ac8998f7364de24a671ebbd6a210c07262fb9844cf8beb6a69af3b2db77851138

  • SSDEEP

    24576:vNifIxtvBagPtzPw7BRDkRD/2ik2+xcaqv15mBTarnh:gfIx1BaA547rD6+12yYvvmBe

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\39973a2c33927b85cde6bbaab75d1bfb.exe
    "C:\Users\Admin\AppData\Local\Temp\39973a2c33927b85cde6bbaab75d1bfb.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2496

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2496-1-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-0-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-3-0x0000000000230000-0x0000000000231000-memory.dmp

    Filesize

    4KB

  • memory/2496-4-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-5-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-6-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2496-7-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-8-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-9-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-10-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-11-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-12-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2496-14-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-15-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-16-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-17-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-18-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-19-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-20-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-21-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-22-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-23-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-24-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB

  • memory/2496-25-0x0000000000400000-0x0000000000A37000-memory.dmp

    Filesize

    6.2MB