Analysis
-
max time kernel
290s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
04-02-2024 03:56
Static task
static1
Behavioral task
behavioral1
Sample
c66ae6e0555a80d1570e7ad84c1ce8c5b78b9ba18848f909b23ed5ed55a4bab1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c66ae6e0555a80d1570e7ad84c1ce8c5b78b9ba18848f909b23ed5ed55a4bab1.exe
Resource
win10-20231215-en
General
-
Target
c66ae6e0555a80d1570e7ad84c1ce8c5b78b9ba18848f909b23ed5ed55a4bab1.exe
-
Size
544KB
-
MD5
e3e4e58f3ac276228254c448dc3e938f
-
SHA1
9da07bb0f61a307ed7340065191aec9b9209a999
-
SHA256
c66ae6e0555a80d1570e7ad84c1ce8c5b78b9ba18848f909b23ed5ed55a4bab1
-
SHA512
a82f926363b7c0ce698815afa8284160794ba9078d11e145784e4407559e006392ef1123333a5904bd1ef2e4dd2c26dbcc2c2835e21ba73338f879dd361e3942
-
SSDEEP
12288:nXrAA5ICjMj4Kp14gWq741Jbhntsyk1b7:n7tTjMjjH471BVmb
Malware Config
Signatures
-
Pitou 2 IoCs
Pitou.
resource yara_rule behavioral1/memory/660-4-0x0000000000400000-0x0000000000811000-memory.dmp pitou behavioral1/memory/660-5-0x0000000000400000-0x0000000000811000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 c66ae6e0555a80d1570e7ad84c1ce8c5b78b9ba18848f909b23ed5ed55a4bab1.exe