Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
11/01/2024, 10:44
Static task
static1
Behavioral task
behavioral1
Sample
534dee86498e7e44ba82dc10921e8fea.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
534dee86498e7e44ba82dc10921e8fea.exe
Resource
win10v2004-20231215-en
General
-
Target
534dee86498e7e44ba82dc10921e8fea.exe
-
Size
158KB
-
MD5
534dee86498e7e44ba82dc10921e8fea
-
SHA1
6344056035c8342ba4614a8a5c70461efe6a31b5
-
SHA256
232e37f46934a69faabc777bc37bb41b113c984f6c2b3fcda3af8e982e63f919
-
SHA512
92edff417c5f8efa51e04e5ead97ed40855acbb6a849d4ca5748901ff4f79bc8b15813fac78f7e3c7cbd82a43f1838972ce6d036285495a392891a045afadb06
-
SSDEEP
3072:Wo7/uZASUJkBhNZAxdJIeQ7hqrw1o98PsMBv3MCmJpfVM:/QAS4KfKx/8GcsMBvMCmJpfK
Malware Config
Signatures
-
Modifies firewall policy service 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile 534dee86498e7e44ba82dc10921e8fea.exe Set value (int) \REGISTRY\MACHINE\SYSTEM\ControlSet001\services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\EnableFirewall = "0" 534dee86498e7e44ba82dc10921e8fea.exe -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\mdc = "C:\\Users\\Admin\\AppData\\Local\\Temp\\534dee86498e7e44ba82dc10921e8fea.exe" 534dee86498e7e44ba82dc10921e8fea.exe -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 534dee86498e7e44ba82dc10921e8fea.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Pre-OS Boot
1Bootkit
1