Overview

overview

6

Static

static

3

493233a450...db.exe

windows7-x64

6

493233a450...db.exe

windows10-2004-x64

6

Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    07/01/2024, 14:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    493233a450517611549584b7b4113bdb.exe

  • Size

    268KB

  • MD5

    493233a450517611549584b7b4113bdb

  • SHA1

    3eb17cc09642b3766390de58f37fd9eccbe2f151

  • SHA256

    bfd18bc454eb6675a92920faf436e05a987b09c0032a2c0b17f80d19eb3141a2

  • SHA512

    10c1100c7eb9c6ab1baeb408e6c7b547adc6ddb1506bdcfc20046ecec9ef38f30f803505169c8f3742b307928b648eaa7ee66e3845b2f0df8b4187d74e8937f1

  • SSDEEP

    6144:9v0ZjIzYs0FJZnTgxCnda9OPUeKhCri00mrzFQ5zB7:9vkIMsqgxKda9OshhCu002WzZ

Score
6/10
bootkitpersistence

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\493233a450517611549584b7b4113bdb.exe
    "C:\Users\Admin\AppData\Local\Temp\493233a450517611549584b7b4113bdb.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:1792

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1792-0-0x0000000000400000-0x0000000000443000-memory.dmp

    Filesize

    268KB

    Download

  • memory/1792-1-0x0000000000400000-0x0000000000443000-memory.dmp

    Filesize

    268KB

    Download