Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2024, 14:56

General

  • Target

    Crack/MyTheatre.exe

  • Size

    3.4MB

  • MD5

    e7eb69b747f835c6b1ce06af9b8e81a0

  • SHA1

    c1193076c8cd29923c76ea274dbf618f51e780b1

  • SHA256

    f8b2b8b5022feacdc01478273052224f2382aff07f63be17be28b527bde07c63

  • SHA512

    518a3c90e5d1872f0596c99e445db12ba19e80f59851f83f28c5ab069269c688bd94869b15ae95df7ff40c4e154e0532c6b97cb2efcdc219463500f178947ea6

  • SSDEEP

    98304:SDWSB6Fk2Ww/5nZM99/Q22I4omLRXlw1zRUVqeepzsm1d5PMXBFechyfx:jXdxJazb4VRK1rljh0FmJ

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Crack\MyTheatre.exe
    "C:\Users\Admin\AppData\Local\Temp\Crack\MyTheatre.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2992

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2992-0-0x0000000000400000-0x000000000152B000-memory.dmp

          Filesize

          17.2MB

        • memory/2992-1-0x0000000000270000-0x0000000000271000-memory.dmp

          Filesize

          4KB

        • memory/2992-2-0x0000000000400000-0x000000000152B000-memory.dmp

          Filesize

          17.2MB