Analysis
-
max time kernel
142s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/04/2024, 20:16
Static task
static1
Behavioral task
behavioral1
Sample
00f486c9323951f61eee4aea4228a8b9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00f486c9323951f61eee4aea4228a8b9.exe
Resource
win10v2004-20240226-en
General
-
Target
00f486c9323951f61eee4aea4228a8b9.exe
-
Size
656KB
-
MD5
00f486c9323951f61eee4aea4228a8b9
-
SHA1
63de2dae8086db5111ec63c4a2e480a870584683
-
SHA256
42297824f811cc055def982bed24871ae568762016663c7640459d5e6079830d
-
SHA512
a5c578f2fa2bc23c7d6dfafd1472e3dc261d6afbbb2f4f0958981449b04c76d8e0e89237db25dfe569698b4d7eb40e0c8e37d8dd63aad12b1fbb2c235ed21621
-
SSDEEP
12288:gJ1M8L5cEcyXH3sMOvzZnPQDIvMJN3drWizM6Izah4Ku9F0C27Fl:gJ1M8LtcMcMGzZC0Mv98vut
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 00f486c9323951f61eee4aea4228a8b9.exe