Analysis
-
max time kernel
146s -
max time network
152s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
08/05/2024, 22:40
Static task
static1
Behavioral task
behavioral1
Sample
dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe
Resource
win11-20240508-en
General
-
Target
dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe
-
Size
932KB
-
MD5
1adf5ccba7618a78deecab91de3f7e60
-
SHA1
b55155450dbc7f7f63117feea00ac90dd7946098
-
SHA256
dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd
-
SHA512
89af9803e4f6ebdb632867f0bf31abda63db0949c48bc854a771e2d670dbddd1033c17d07df7d860fbc67524ead43002b19d8db29ae7a16536b6226e4474b5eb
-
SSDEEP
12288:MOQNMIt3+hioijxOcaGW/v7EWEfvnJUC2+6zI4cHkYaG6U5SqFS4609bCFrZd:LWMIMhiop+4w7fvT2dMINbU5zFQmUz
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe -
Program crash 1 IoCs
pid pid_target Process procid_target 1016 2528 WerFault.exe 76
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe"C:\Users\Admin\AppData\Local\Temp\dc00dd473a6c949a36d325c1024c70e4533df329898016a8017906d9d241a6dd.exe"1⤵
- Writes to the Master Boot Record (MBR)
PID:2528 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 2528 -s 6442⤵
- Program crash
PID:1016
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 2528 -ip 25281⤵PID:1324