Analysis

  • max time kernel
    146s
  • max time network
    151s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240419-en
  • resource tags

    arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    14/05/2024, 13:37

General

  • Target

    fd13f8215fc84a9b9e65d8a9fe2d59f0132f339bd774812eca7b985b88c23e7c.exe

  • Size

    1.0MB

  • MD5

    ce25ee34204d03604de7510aeb3818cd

  • SHA1

    01178ec5351f282204b620a0363eaede375a84f6

  • SHA256

    fd13f8215fc84a9b9e65d8a9fe2d59f0132f339bd774812eca7b985b88c23e7c

  • SHA512

    3527bec3ab41af6911006c71269d9d8625782ec214e92c4ba70376b5704df3c19c445636ac6f68bb915bf779e72e19d484c1dd5137d46e150fd7d4af09caff95

  • SSDEEP

    24576:P9dNUQFgv1LBrTTjkkuYvWPHsyILO3HCpxlunGe:PrN9GvvrPPW0bLOSpx8

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fd13f8215fc84a9b9e65d8a9fe2d59f0132f339bd774812eca7b985b88c23e7c.exe
    "C:\Users\Admin\AppData\Local\Temp\fd13f8215fc84a9b9e65d8a9fe2d59f0132f339bd774812eca7b985b88c23e7c.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:3548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3548-0-0x00000000023A0000-0x00000000023A1000-memory.dmp

    Filesize

    4KB

  • memory/3548-1-0x0000000002A60000-0x0000000002AD0000-memory.dmp

    Filesize

    448KB

  • memory/3548-2-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/3548-3-0x0000000000400000-0x000000000050F000-memory.dmp

    Filesize

    1.1MB

  • memory/3548-4-0x0000000000400000-0x000000000050F000-memory.dmp

    Filesize

    1.1MB

  • memory/3548-7-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB