Analysis
-
max time kernel
140s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 10:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5055800587ff74d767ad9d7822e735c0.exe
Resource
win7-20231129-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5055800587ff74d767ad9d7822e735c0.exe
Resource
win10v2004-20231215-en
0 signatures
150 seconds
General
-
Target
5055800587ff74d767ad9d7822e735c0.exe
-
Size
238KB
-
MD5
5055800587ff74d767ad9d7822e735c0
-
SHA1
7f2efdbaaed85e983c06a040537453b1fb15d1be
-
SHA256
a17343227ffd56ad6cae37885507d13b8da7e85d40f9718400e79f5670b4a07f
-
SHA512
ba106f705dfb6c161dec09a1c9e4a2a3981a037a8648afaee1e36801bbfb2b20f408b6126f5794db068e7ab7d0b115fd05876a2fe2032c1d1415f901476eda70
-
SSDEEP
6144:t9gQWC2QQ250OwGof4B98gWNlPTGQQm6agrd:tqQjQ2m8yNtTird
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 5055800587ff74d767ad9d7822e735c0.exe