Analysis
-
max time kernel
70s -
max time network
75s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12-06-2024 12:50
Static task
static1
Behavioral task
behavioral1
Sample
71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39.exe
Resource
win10v2004-20240508-en
General
-
Target
71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39.exe
-
Size
212KB
-
MD5
d577512bcc91096f2185b4f2d44461db
-
SHA1
a8acdfc8e92b90e7bd4fd347bad465be32b02455
-
SHA256
71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39
-
SHA512
1058f7f42981de880a8b0cf7580561f8af3e068735a4336b69d4f1d525fd79bdbb9f9420212d2257f31f1f959fe7e218520643df9b321317411c6665eab48761
-
SSDEEP
3072:csmIwp0Lr0cZMHeBw4kQkFAe5sWkn0VEqj+KHy+pDyXtLAcjaK7PuENhVPW0cokO:cGwqAHAw49UsWknOEqiJ+AXD7PPW0fdv
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39.exedescription ioc process File opened for modification \??\PhysicalDrive0 71299a484d71752fd0e1dfaad70a18237f31e516d29d1d3466fae93437f12f39.exe