Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 02:15

General

  • Target

    download/MiniThunderPlatform.exe

  • Size

    242KB

  • MD5

    34444dc623da1ee6e4d8520f6f9f1907

  • SHA1

    e1227a2e1fbf689fc7c864c59ba91775c47775db

  • SHA256

    24d8df120fa5b4d10462733d0dd4a0a51d84244055aab2ee0c8530ea870493a0

  • SHA512

    ba2fc7f6646803f9395685ff36448a53664f56f01ee16d4210c8dafe7d2fea5e16705e363eef23f4032f662560798b5b227c861e2c4257813a748a47fd43c84f

  • SSDEEP

    3072:fLtMY15dQq1vaHMgFc489lPM1og2dbBKuyxRgmbp:r1X94SPM1oNYRRlp

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\download\MiniThunderPlatform.exe
    "C:\Users\Admin\AppData\Local\Temp\download\MiniThunderPlatform.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2416

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2416-0-0x0000000000400000-0x000000000044E000-memory.dmp

          Filesize

          312KB

        • memory/2416-2-0x000000006FFF0000-0x0000000070000000-memory.dmp

          Filesize

          64KB

        • memory/2416-4-0x0000000000400000-0x000000000044E000-memory.dmp

          Filesize

          312KB