Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
28-05-2024 07:39
General
-
Target
gamebox.exe
-
Size
2.8MB
-
MD5
b165f9c47b5ce6d45bdf892a3bc1bdcc
-
SHA1
17c112a2267deb9e84dcd20c6d9cc5018073eb4f
-
SHA256
31b07b764a2990629b0072e8d5148cfb8f731a38a13477629994e41d881c2130
-
SHA512
32134928bf1a1ddf9a0b4fa9c80c9bb43d28921edb074653cdbd721f91eef28f03bd8f9aa508f97d9adfcdd5447cff9a60c232064e3fd4375bba6d9386f1f7bb
-
SSDEEP
49152:vRLoo8J+cSPDzOKjTrJM/I31lQND4Aml8bee5WmL7iTPDTNXH+Set69mzSed:vJV2+cSr6Kjq/IAND91Ce5vXeXH+Su
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\gamebox.exe"C:\Users\Admin\AppData\Local\Temp\gamebox.exe"1⤵
- Writes to the Master Boot Record (MBR)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
87B
MD55d7d89bfb483aa69c9ff39e2d46c8b8c
SHA18a95724c1bce2fdbb12acb194d2ca6e562d54394
SHA25613e9400b6a2207239cca16aa02cf25e569d5b8ae21e6e52bdddc97872c98a56f
SHA51232bc32209a6c4cae43e94a623e0c2578c85f7f231c86d2897a50987011686701050a5c8b2744713321a078d9bde1dcf113bdec618aa1023eecefe44f483984a3
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB
-
Filesize
4KB