Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
24/05/2024, 11:56
General
-
Target
713a88bfb22911a3403d35c754fa64d00efae0cbf3ec190f3ac09839f5ca6ffc.exe
-
Size
7.7MB
-
MD5
e2b515dbf84c2027b9ac3491ff09480e
-
SHA1
0a5043b3069dd8584205977ba52f43c970bfb898
-
SHA256
713a88bfb22911a3403d35c754fa64d00efae0cbf3ec190f3ac09839f5ca6ffc
-
SHA512
a09c0c33f6b5afd19e86b3252aba3d718ab94697599f91e8d24e18fe365ff93954a4c0299844687b4c997811a65f2a7672cc88f83128c8a5aeabeb6d91404110
-
SSDEEP
196608:Ei9O9nK/HbZ49RBmVE0vv8xMxGaU/4hBDf8sxrVWCTYKUAAlw:m9K/HbZ49WVfXwydfxrVW8Uxw
Score
6/10
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
-
Drops file in Windows directory 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\713a88bfb22911a3403d35c754fa64d00efae0cbf3ec190f3ac09839f5ca6ffc.exe"C:\Users\Admin\AppData\Local\Temp\713a88bfb22911a3403d35c754fa64d00efae0cbf3ec190f3ac09839f5ca6ffc.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.3MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
4KB
-
Filesize
15.6MB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
15.6MB
-
Filesize
4.3MB