Analysis
-
max time kernel
33s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/02/2024, 10:52
General
-
Target
abb5120984b9959a058f75950898022d.exe
-
Size
175KB
-
MD5
abb5120984b9959a058f75950898022d
-
SHA1
2cfcb77f2181aba928a7990c1900ef4f244dcf38
-
SHA256
984c91c5e69233cc6a9dcd707cd5e0869b359c3e13eee006cb67acc59991a0d3
-
SHA512
336257a48481223a8d50499992a2752ded22c593de7a49bf0d9f86f7f7a8f6050593918021ba14d25f72bfc7a4a43b2104b91c60fca3e1ca8d74027cfa723121
-
SSDEEP
3072:G4nJ+EFp/KCBtVt7MiXMimyetoPShr/dEQ0F0ZPQydH3cxqrcYu:9ngE/KqYi8OeteShZEQKwPDsxq8
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\abb5120984b9959a058f75950898022d.exe"C:\Users\Admin\AppData\Local\Temp\abb5120984b9959a058f75950898022d.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: RenamesItself
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB
-
Filesize
272KB