Analysis

  • max time kernel
    126s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/05/2024, 02:15

General

  • Target

    download/MiniThunderPlatform.exe

  • Size

    242KB

  • MD5

    34444dc623da1ee6e4d8520f6f9f1907

  • SHA1

    e1227a2e1fbf689fc7c864c59ba91775c47775db

  • SHA256

    24d8df120fa5b4d10462733d0dd4a0a51d84244055aab2ee0c8530ea870493a0

  • SHA512

    ba2fc7f6646803f9395685ff36448a53664f56f01ee16d4210c8dafe7d2fea5e16705e363eef23f4032f662560798b5b227c861e2c4257813a748a47fd43c84f

  • SSDEEP

    3072:fLtMY15dQq1vaHMgFc489lPM1og2dbBKuyxRgmbp:r1X94SPM1oNYRRlp

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\download\MiniThunderPlatform.exe
    "C:\Users\Admin\AppData\Local\Temp\download\MiniThunderPlatform.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:4364
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4624,i,1999448010053300448,1112699187621658374,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:8
    1⤵
      PID:4140

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4364-0-0x0000000000400000-0x000000000044E000-memory.dmp

            Filesize

            312KB

          • memory/4364-2-0x000000006FFF0000-0x0000000070000000-memory.dmp

            Filesize

            64KB

          • memory/4364-4-0x0000000000400000-0x000000000044E000-memory.dmp

            Filesize

            312KB