Analysis
-
max time kernel
291s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 23:00
Static task
static1
Behavioral task
behavioral1
Sample
3ca37f03643c7832f87e141c89404db816be212e0b8e817dd5dcabb86d56a932.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3ca37f03643c7832f87e141c89404db816be212e0b8e817dd5dcabb86d56a932.exe
Resource
win10-20240404-en
General
-
Target
3ca37f03643c7832f87e141c89404db816be212e0b8e817dd5dcabb86d56a932.exe
-
Size
1.1MB
-
MD5
e7c4115d2d2e0b2609cdb505a549abff
-
SHA1
1c20621b82f59725ed7c9f9597ea7d702fc2d729
-
SHA256
3ca37f03643c7832f87e141c89404db816be212e0b8e817dd5dcabb86d56a932
-
SHA512
4fe7cdd41870c11c1a5f69f6334cea3d0d8c4b3e25d2c26e36311107cd1b7e37d3398431a78a70e7bb7628fe66345d7acbf416f66ab56077c799e648141ed382
-
SSDEEP
24576:FI7m4LjGr35sk7kN9h/FNff2RbLbyBDOYO5cd4e7:FI7Sj77kN9h/YblYO5e
Malware Config
Signatures
-
Pitou 2 IoCs
Pitou.
resource yara_rule behavioral1/memory/2824-3-0x0000000000400000-0x000000000051B000-memory.dmp pitou behavioral1/memory/2824-4-0x0000000000400000-0x000000000051B000-memory.dmp pitou -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PHYSICALDRIVE0 3ca37f03643c7832f87e141c89404db816be212e0b8e817dd5dcabb86d56a932.exe