Analysis
-
max time kernel
141s -
max time network
93s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16-06-2024 21:51
Static task
static1
Behavioral task
behavioral1
Sample
d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af.exe
Resource
win11-20240508-en
General
-
Target
d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af.exe
-
Size
640KB
-
MD5
697a74d74eaa991ad75f8a8e69e7ace3
-
SHA1
4c3ad4bff79f8019ecf0fad63ff3da33e4aaa50c
-
SHA256
d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af
-
SHA512
8e802ed0c90b5dfcad95333de88c5ffb5ea79499facda9eb2b00e9d9614364447705bc0a89bcd5502b685f283d3d8e521e8e5ee6cee510dd627f91fc70f89ae0
-
SSDEEP
12288:TgKlMlGdH/kojQttFGpLygZX9uYyDmD4XiwmFm7:lKlGdHMv/e93yDhDm8
Malware Config
Signatures
-
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
Processes:
d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af.exedescription ioc process File opened for modification \??\PHYSICALDRIVE0 d4fbd80ddfe3fadaa9ff064ec15ccd42de618576d81fc1f5d32d0f0ed1fa83af.exe