Analysis
-
max time kernel
291s -
max time network
256s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
04/04/2024, 22:22
Static task
static1
Behavioral task
behavioral1
Sample
21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe
Resource
win10-20240404-en
General
-
Target
21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe
-
Size
608KB
-
MD5
6a4ec897356a46351e5fa9c7fce1f0e6
-
SHA1
42c7370d27bece4f90bf6f67720477dbb6a395cb
-
SHA256
21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c
-
SHA512
03819dfa223624cc173645f133fc001b01959fc2371602cd3e51f35f54cbf5984959b5ba0d5521c3877d2426215017d4383ff002fe9bfe65d67b1e180ed65396
-
SSDEEP
12288:MDO123L+kMyDZxM6l89j3Jj5v0oU6WH+FL1BFYse4+6+5h+Ra/Z:aOVkPZx/89LJlv0okH+h1BFQAAr/Z
Malware Config
Signatures
-
Pitou 2 IoCs
Pitou.
resource yara_rule behavioral2/memory/4704-4-0x0000000000400000-0x000000000059C000-memory.dmp pitou behavioral2/memory/4704-5-0x0000000000400000-0x000000000059C000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 21d8409abdca8ee37e82618659a5d9654a774988e47c9f714562bd73c8a7345c.exe