Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
03-03-2024 13:51
General
-
Target
Trojan.Win32.KillDisk.exe
-
Size
60KB
-
MD5
571de903333a6951b8875a73f6cf99c5
-
SHA1
5c2ef418a36799541cec673dd7d9f87371a9e3bd
-
SHA256
8a81a1d0fae933862b51f63064069aa5af3854763f5edc29c997964de5e284e5
-
SHA512
dcfb8ae96ec975938592f22932a804b3105bc3293a22ed336bd9687045bc0e168e6aef9a1485f1a2d986e1d7e928221d7ee7b53f756958b700fc4dada503f309
-
SSDEEP
1536:8f0XnibgFacx2jecu0FRf6Ut3JhH0Y4LZ2FkRg:fEecVNvhUYqS
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in Windows directory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.KillDisk.exe"C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.KillDisk.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Drops file in Windows directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
MD51c7b324a6f03a393011908d3644a0746
SHA1a647ce1a5b769c43d2a8a959b57feaae835cc627
SHA2563b348a869527935b596d3982a9df949f99a33c3002da57f172bf1840ea3a3ca2
SHA512219968e597005f82203548b77292f694a17efa076739094ecc8411187b1a7a56c31c866e80d8237654d402765d0afa37a6cf67877bb1dc7f98aa7de1c2181f36