Analysis
-
max time kernel
291s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-04-2024 23:01
Static task
static1
Behavioral task
behavioral1
Sample
e4fac93602243c868341856e79e5e1e95d4987f0afc5a16004298bf716bbff3c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e4fac93602243c868341856e79e5e1e95d4987f0afc5a16004298bf716bbff3c.exe
Resource
win10-20240404-en
General
-
Target
e4fac93602243c868341856e79e5e1e95d4987f0afc5a16004298bf716bbff3c.exe
-
Size
589KB
-
MD5
7c52ebfd215b98482d0bda9749f8f1ac
-
SHA1
9f246b53c1e402c8cee85dd844918dcf260b6011
-
SHA256
e4fac93602243c868341856e79e5e1e95d4987f0afc5a16004298bf716bbff3c
-
SHA512
96eeeca5e0c176db1ca2c5e257fc5b0f97d929118e07e758b177b9c0aadee6ec2cfbbde058b912b5241c2e441e45d50360c52b900fce8fdd64d9193118f28a4e
-
SSDEEP
12288:076E92+mymzTczqwaUZ1TNFTFQKv9uH64k+O3:0aszqG/eKv9uHDO3
Malware Config
Signatures
-
Pitou 3 IoCs
Pitou.
resource yara_rule behavioral1/memory/1460-2-0x0000000000400000-0x00000000008B2000-memory.dmp pitou behavioral1/memory/1460-4-0x0000000000400000-0x00000000008B2000-memory.dmp pitou behavioral1/memory/1460-5-0x0000000000400000-0x00000000008B2000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 e4fac93602243c868341856e79e5e1e95d4987f0afc5a16004298bf716bbff3c.exe