Analysis

  • max time kernel
    292s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18-04-2024 22:22

General

  • Target

    19b8156268246b72a726f8954de25d0002d25d4dfb3577918a177a193f2214e7.exe

  • Size

    627KB

  • MD5

    5c1036e85b8a65ed29f654e38f71718a

  • SHA1

    2637f47be64adaa3dfcaa1dca3ba788e0ad7b9c5

  • SHA256

    19b8156268246b72a726f8954de25d0002d25d4dfb3577918a177a193f2214e7

  • SHA512

    e3b0b5e2a74e24edc81f1f080fb089d5d6c4200cdb74b264c587f568714ccbf0492d94b576e13df7997b05cac67b7fdc23ec1cb34bfecb744d59b0ba958c9a49

  • SSDEEP

    12288:F81231aUCBZ7NH77EnxR3eUVC1L15HBaTFhi2HwrO+821w:FF31GBZ7pUhDC1BexhxgO3

Score
10/10

Malware Config

Signatures

  • Pitou 2 IoCs

    Pitou.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\19b8156268246b72a726f8954de25d0002d25d4dfb3577918a177a193f2214e7.exe
    "C:\Users\Admin\AppData\Local\Temp\19b8156268246b72a726f8954de25d0002d25d4dfb3577918a177a193f2214e7.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2340-1-0x0000000002DA0000-0x0000000002EA0000-memory.dmp

    Filesize

    1024KB

  • memory/2340-2-0x0000000000260000-0x00000000002CB000-memory.dmp

    Filesize

    428KB

  • memory/2340-4-0x0000000000400000-0x0000000002C7F000-memory.dmp

    Filesize

    40.5MB

  • memory/2340-3-0x0000000000400000-0x0000000002C7F000-memory.dmp

    Filesize

    40.5MB

  • memory/2340-5-0x0000000000400000-0x0000000002C7F000-memory.dmp

    Filesize

    40.5MB

  • memory/2340-7-0x0000000000260000-0x00000000002CB000-memory.dmp

    Filesize

    428KB

  • memory/2340-8-0x0000000002DA0000-0x0000000002EA0000-memory.dmp

    Filesize

    1024KB