Analysis

  • max time kernel
    141s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    13/05/2024, 22:21

General

  • Target

    6ff45731011d127cd979925a68dfee06b1c3dfb2ac345bf491b4dfbf1866ea3b.exe

  • Size

    540KB

  • MD5

    785664adecfa5d51d91eeb0052358c94

  • SHA1

    32392bd538beef2024b19056135a5c41ee39cb25

  • SHA256

    6ff45731011d127cd979925a68dfee06b1c3dfb2ac345bf491b4dfbf1866ea3b

  • SHA512

    c08bd0babbec2e47d77222615430633b234a928e1f9be670d14d23b5dd8c74ebf4f4155bb71c9cdd2b0a7159019d429dc401fd56266ce947af0a917ff98acac1

  • SSDEEP

    12288:98ICfqFSLOADnPDAE7AES9lzPZ7IRCMEE1f7RD:9hCfqFSLOADPR7rSvFI3

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\6ff45731011d127cd979925a68dfee06b1c3dfb2ac345bf491b4dfbf1866ea3b.exe
    "C:\Users\Admin\AppData\Local\Temp\6ff45731011d127cd979925a68dfee06b1c3dfb2ac345bf491b4dfbf1866ea3b.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:3396

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/3396-1-0x0000000002930000-0x0000000002A30000-memory.dmp

          Filesize

          1024KB

        • memory/3396-2-0x00000000044A0000-0x000000000450B000-memory.dmp

          Filesize

          428KB

        • memory/3396-3-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB

        • memory/3396-4-0x0000000000400000-0x0000000002774000-memory.dmp

          Filesize

          35.5MB

        • memory/3396-5-0x0000000000400000-0x0000000002774000-memory.dmp

          Filesize

          35.5MB

        • memory/3396-7-0x0000000002930000-0x0000000002A30000-memory.dmp

          Filesize

          1024KB

        • memory/3396-8-0x00000000044A0000-0x000000000450B000-memory.dmp

          Filesize

          428KB

        • memory/3396-10-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB