Analysis

  • max time kernel
    140s
  • max time network
    96s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/05/2024, 11:00

General

  • Target

    e875ff44388d7eeb4efe9731294a2ffffa3c50975b679908ae26da2fb204a432.exe

  • Size

    1.1MB

  • MD5

    ec93cd0ab9ab5a2fa92ca4bde146e41d

  • SHA1

    35a62b6e24081e2797f6ea813e9ad624f88e2140

  • SHA256

    e875ff44388d7eeb4efe9731294a2ffffa3c50975b679908ae26da2fb204a432

  • SHA512

    8a5a396c5e31b9e1da01a1b38fc2624d13d6fce6c6384bb0f54f8c7c8ad44b24f9f5cff8248843dbf79e3198960b77f40b6d2a84a2f9ed63f87458e55f9d08a9

  • SSDEEP

    24576:nPeGXYP3lOi7b6mdJfCZIu4AbX5CN/aXfWWCGCPN:nPd8V8yHUX50Wed

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\e875ff44388d7eeb4efe9731294a2ffffa3c50975b679908ae26da2fb204a432.exe
    "C:\Users\Admin\AppData\Local\Temp\e875ff44388d7eeb4efe9731294a2ffffa3c50975b679908ae26da2fb204a432.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:3512

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3512-0-0x00000000006D0000-0x00000000006D1000-memory.dmp

          Filesize

          4KB

        • memory/3512-1-0x0000000002470000-0x00000000024E8000-memory.dmp

          Filesize

          480KB

        • memory/3512-2-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB

        • memory/3512-3-0x0000000000400000-0x0000000000518000-memory.dmp

          Filesize

          1.1MB

        • memory/3512-4-0x0000000000400000-0x0000000000518000-memory.dmp

          Filesize

          1.1MB

        • memory/3512-6-0x00000000006D0000-0x00000000006D1000-memory.dmp

          Filesize

          4KB

        • memory/3512-8-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB