Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:21
Static task
static1
Behavioral task
behavioral1
Sample
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
Resource
win10v2004-20240508-en
General
-
Target
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe
-
Size
4.8MB
-
MD5
63f880de9b45fe6ff4d234e088879e71
-
SHA1
55146fb6b34652e3e6810911122997d276a82c5c
-
SHA256
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0
-
SHA512
f2bfda6fb31c193f290d76b72d6d1db40ee33b5b41786f3fefb1c73bb24223753b8abbb0f303608e4cbfe0e3c38db914957cb5dbab5ffca9a19e527e593a0863
-
SSDEEP
98304:R1nW5UuUxP8FH3VthPiG4b/wKhSCafTzsrM:e5sPYkG4jwcS6M
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exedescription ioc process File opened for modification \??\PhysicalDrive0 2eb6e79c9f12de5c4f1616fddd1d510400a78c5458bda58b27beb18a227ad1d0.exe