Analysis
-
max time kernel
291s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29-03-2024 01:50
Static task
static1
Behavioral task
behavioral1
Sample
7b4d57e9f26d80f5e5de6298d3b1562ef6e5519b25168c40c03e661de11b570c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b4d57e9f26d80f5e5de6298d3b1562ef6e5519b25168c40c03e661de11b570c.exe
Resource
win10-20240221-en
General
-
Target
7b4d57e9f26d80f5e5de6298d3b1562ef6e5519b25168c40c03e661de11b570c.exe
-
Size
533KB
-
MD5
8bdd69dbbf625cc5b0b0a23808b6d9e3
-
SHA1
934cef92585f3b4e459a1d2fe8295782ad1234ea
-
SHA256
7b4d57e9f26d80f5e5de6298d3b1562ef6e5519b25168c40c03e661de11b570c
-
SHA512
27d77bc98d495ed8b677d8e85f0b34d2bcb24c5e5477853bfb636c2a032e7528c8a5785a396b436b0f448750c8cbe106717868b55267bc3a232058aa25b28aba
-
SSDEEP
12288:UhIrlMPKOHt9f8QS9jU/PaHaHyUgdxBSMFED4arOUDnD:UhLN9ClUqSqEiEDZO4
Malware Config
Signatures
-
Pitou 2 IoCs
Pitou.
resource yara_rule behavioral1/memory/2184-4-0x0000000000400000-0x0000000000589000-memory.dmp pitou behavioral1/memory/2184-5-0x0000000000400000-0x0000000000589000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 7b4d57e9f26d80f5e5de6298d3b1562ef6e5519b25168c40c03e661de11b570c.exe