Analysis

  • max time kernel
    159s
  • max time network
    176s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-01-2024 10:19

General

  • Target

    c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe

  • Size

    237KB

  • MD5

    f4c59c547947b6e54228b59e6065188b

  • SHA1

    69cae7543ed815f56bdc527c36e45869e8913fb7

  • SHA256

    c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786

  • SHA512

    79bcf8b9e7c5618569b6bba18d5291f9bb6150346e0fb27ff3d0abf3809e584229a7eaf205b67f84efc9167a08cf0611197076702f44274864e4740281ac10d9

  • SSDEEP

    6144:zG03rH4ygNh1JXuTif1wkTLPH2sEYtU5n4+roSI8rW:68fg7+TvkTLPH2shtUm+roSJrW

Malware Config

Signatures

  • UPX packed file 3 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe
    "C:\Users\Admin\AppData\Local\Temp\c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1560-0-0x0000000000400000-0x000000000053B000-memory.dmp

    Filesize

    1.2MB

  • memory/1560-1-0x0000000000400000-0x000000000053B000-memory.dmp

    Filesize

    1.2MB

  • memory/1560-3-0x0000000000400000-0x000000000053B000-memory.dmp

    Filesize

    1.2MB