Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/06/2024, 07:55

General

  • Target

    4936bc7671de2385926a2e38b2a2f1116f3a2e28eadbbafb244a84e37c671875.exe

  • Size

    639KB

  • MD5

    274c3fee7d273222b586a36e96e29379

  • SHA1

    aaac4c47c5ff73fee1efd0d883b37fb26e3eae0d

  • SHA256

    4936bc7671de2385926a2e38b2a2f1116f3a2e28eadbbafb244a84e37c671875

  • SHA512

    de5e1693ea2a6a0b2c643b1676789383a1431de62afdcaafcf0d7a41fc9d943e241f33fe6355e51ef78d09d4c03faf5c363b484514929d95cb28e675d2f2563c

  • SSDEEP

    12288:86UWwSR40H8Fy2xPH7DJEC6TSRN6U62oPs+lbNznJaowXp6NpnIb:6WwSRjcEGbpBRNz62oE+lbt7q4Npn

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\4936bc7671de2385926a2e38b2a2f1116f3a2e28eadbbafb244a84e37c671875.exe
    "C:\Users\Admin\AppData\Local\Temp\4936bc7671de2385926a2e38b2a2f1116f3a2e28eadbbafb244a84e37c671875.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:2592

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2592-1-0x0000000001D30000-0x0000000001E30000-memory.dmp

          Filesize

          1024KB

        • memory/2592-3-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB

        • memory/2592-2-0x0000000003820000-0x000000000388B000-memory.dmp

          Filesize

          428KB

        • memory/2592-4-0x0000000000400000-0x0000000001C1B000-memory.dmp

          Filesize

          24.1MB

        • memory/2592-5-0x0000000000400000-0x0000000001C1B000-memory.dmp

          Filesize

          24.1MB

        • memory/2592-6-0x0000000001D30000-0x0000000001E30000-memory.dmp

          Filesize

          1024KB

        • memory/2592-7-0x0000000003820000-0x000000000388B000-memory.dmp

          Filesize

          428KB

        • memory/2592-9-0x0000000000400000-0x000000000046F000-memory.dmp

          Filesize

          444KB