Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    16-06-2024 17:31

General

  • Target

    0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe

  • Size

    640KB

  • MD5

    f163a78d48e34219ed4346390e38ae77

  • SHA1

    d9abd1ae037060141562855d473581a6803cb32f

  • SHA256

    0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c

  • SHA512

    3d7ed5ac6bf0176af285f661809e2ce5f8447dea2cd4dd2c5e6d179d176f3489be81a428f3d1921564d99704d29759db0cffa71b03921186e7f9a9f23acda23d

  • SSDEEP

    12288:Pgil4Hk9vX+d+T9lzoGADobfa4L9zfuxAYLcELioPuZm7:ZGEBudS0G64LBd0t2w

Score
6/10

Malware Config

Signatures

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe
    "C:\Users\Admin\AppData\Local\Temp\0f11ba5a1239aea4a1a9f58fa375c9d5fd0ddfe52e67aaddca6a371f49f9213c.exe"
    1⤵
    • Writes to the Master Boot Record (MBR)
    PID:768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/768-2-0x0000000004060000-0x00000000040CB000-memory.dmp

    Filesize

    428KB

  • memory/768-1-0x00000000026C0000-0x00000000027C0000-memory.dmp

    Filesize

    1024KB

  • memory/768-3-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB

  • memory/768-4-0x0000000000400000-0x00000000023BC000-memory.dmp

    Filesize

    31.7MB

  • memory/768-5-0x0000000000400000-0x00000000023BC000-memory.dmp

    Filesize

    31.7MB

  • memory/768-8-0x0000000004060000-0x00000000040CB000-memory.dmp

    Filesize

    428KB

  • memory/768-7-0x00000000026C0000-0x00000000027C0000-memory.dmp

    Filesize

    1024KB

  • memory/768-9-0x0000000000400000-0x000000000046F000-memory.dmp

    Filesize

    444KB