Analysis
- max time kernel
291s - max time network
298s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
08/05/2024, 22:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658.exe
Resource
win7-20240419-en
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658.exe
Resource
win10-20240404-en
2 signatures
300 seconds
General
- Target 23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658.exe
- Size 524KB
- Sample240508-2lsdsabd3x
- SHA256 23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658
- MD5 cf39df6760e145858728018ec24ee301
- SHA1 9c70b1eaed52dca858c037a6f012026a3eab27df
- SHA512 9836cba0721622f6877ca01657091523762244e18f8eb0d9c13a9ca1665569e207e8852f56e8ae5aa94af1db04bdf811e5cebe2c6a569c30ed13e031d2079eaf
- SSDEEP 12288:ore6TPBPr6wOtiKeX42F31VsRL6eh+7f:olkPi42xs87f
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Pitou 2 IoCs
Pitou.
resource yara_rule behavioral2/memory/4700-4-0x0000000000400000-0x00000000025BF000-memory.dmp pitou behavioral2/memory/4700-5-0x0000000000400000-0x00000000025BF000-memory.dmp pitou - Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 23923a17f96f8cfacdeec333db21df887bf241fe4eb5b3617b1bd34e638ba658.exe