Analysis
-
max time kernel
159s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
02-01-2024 10:19
Behavioral task
behavioral1
Sample
c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe
Resource
win10v2004-20231215-en
General
-
Target
c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe
-
Size
237KB
-
MD5
f4c59c547947b6e54228b59e6065188b
-
SHA1
69cae7543ed815f56bdc527c36e45869e8913fb7
-
SHA256
c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786
-
SHA512
79bcf8b9e7c5618569b6bba18d5291f9bb6150346e0fb27ff3d0abf3809e584229a7eaf205b67f84efc9167a08cf0611197076702f44274864e4740281ac10d9
-
SSDEEP
6144:zG03rH4ygNh1JXuTif1wkTLPH2sEYtU5n4+roSI8rW:68fg7+TvkTLPH2shtUm+roSJrW
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/1560-0-0x0000000000400000-0x000000000053B000-memory.dmp upx behavioral2/memory/1560-1-0x0000000000400000-0x000000000053B000-memory.dmp upx behavioral2/memory/1560-3-0x0000000000400000-0x000000000053B000-memory.dmp upx -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\physicaldrive0 c472b594366da0b163008386eafb204666d12e403db8b3e9e6613897cf48d786.exe