Resubmissions

28/01/2024, 21:51

240128-1qxnmaahe4 3

28/01/2024, 21:46

240128-1m2s6sagf8 3

28/01/2024, 21:42

240128-1kb5qscbgk 3

Analysis

  • max time kernel
    0s
  • max time network
    23s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2024, 21:42

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\EFI\boot\bootia32.exe command="C:\Users\Admin\AppData\Local\Temp\EFI\boot\bootia32.exe" wdir=C:\Users\Admin\AppData\Local\Temp\EFI\boot Payload error: The %1 application cannot be run in Win32 mode.

General

  • Target

    EFI/boot/bootia32.exe

  • Size

    566KB

  • MD5

    11481582f68ab476bc5edc7d152017ae

  • SHA1

    fdfdf94995356e4fb0a018acbdf1f4af878aaddc

  • SHA256

    9f05b8e82b3cf58fa1d5ce30b3180782abae2432ea1f30945eb5a695ca44a5c5

  • SHA512

    6eb997a0c8d73121d7a2fd5faeebec691763d8041e927828e9e5eaeeb6de90d88d0c7670afb25212b748c1bec691c56984236a6e893a2e02318a789e44ea9e89

  • SSDEEP

    12288:4JrDebmeFOEj+d8WmjB7i4pesBBnWJe8ZUpVMRE0ORQZg:kq6kj7i4pesBhWJeWUpVMRlW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\EFI\boot\bootia32.exe
    "C:\Users\Admin\AppData\Local\Temp\EFI\boot\bootia32.exe"
    1⤵
      PID:4112

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads