Analysis

  • max time kernel
    291s
  • max time network
    256s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    04/04/2024, 22:22

General

  • Target

    21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe

  • Size

    608KB

  • MD5

    6a4ec897356a46351e5fa9c7fce1f0e6

  • SHA1

    42c7370d27bece4f90bf6f67720477dbb6a395cb

  • SHA256

    21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c

  • SHA512

    03819dfa223624cc173645f133fc001b01959fc2371602cd3e51f35f54cbf5984959b5ba0d5521c3877d2426215017d4383ff002fe9bfe65d67b1e180ed65396

  • SSDEEP

    12288:MDO123L+kMyDZxM6l89j3Jj5v0oU6WH+FL1BFYse4+6+5h+Ra/Z:aOVkPZx/89LJlv0okH+h1BFQAAr/Z

Score
10/10

Malware Config

Signatures

  • Pitou 2 IoCs

    Pitou.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe
    "C:\Users\Admin\AppData\Local\Temp\21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4704-2-0x0000000002180000-0x00000000021EB000-memory.dmp

    Filesize

    428KB

  • memory/4704-1-0x00000000006D0000-0x00000000007D0000-memory.dmp

    Filesize

    1024KB

  • memory/4704-4-0x0000000000400000-0x000000000059C000-memory.dmp

    Filesize

    1.6MB

  • memory/4704-3-0x0000000000400000-0x000000000059C000-memory.dmp

    Filesize

    1.6MB

  • memory/4704-5-0x0000000000400000-0x000000000059C000-memory.dmp

    Filesize

    1.6MB

  • memory/4704-6-0x00000000006D0000-0x00000000007D0000-memory.dmp

    Filesize

    1024KB